Lucene search
+L

3992 matches found

Exploit DB
Exploit DB
added 2010/06/25 12:00 a.m.30 views

Cisco Adaptive Security Response - HTTP Response Splitting

source: https://www.securityfocus.com/bid/41159/info Cisco Adaptive Security Response ASA is prone to an HTTP response-splitting vulnerability. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that...

4.3CVSS5.2AI score0.11567EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
added 2010/06/14 12:00 a.m.6 views

Novell GroupWise Messenger HTTP Response Handling Stack Overflow (CVE-2008-2703)

Novell GroupWise Messenger is a corporate instant messaging solution targeting toward medium to large enterprise organizations. It facilitates secure communications and policy-based management through Novell's eDirectory product suite. The product is based on a client-server model where messaging...

10CVSS8.1AI score0.61121EPSS
SaveExploits8
exploitpack
exploitpack
added 2010/05/05 12:00 a.m.17 views

WordPress Plugin Cimy Counter 0.9.4 - HTTP Response Splitting Cross-Site Scripting

WordPress Plugin Cimy Counter 0.9.4 - HTTP Response Splitting Cross-Site Scripting source: https://www.securityfocus.com/bid/41132/info Cimy Counter for WordPress is prone to an HTTP response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize...

6.7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/05/05 12:00 a.m.22 views

WordPress Plugin Cimy Counter 0.9.4 - HTTP Response Splitting / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41132/info Cimy Counter for WordPress is prone to an HTTP response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary scrip...

5.8AI score
SaveExploits0
Patchstack
Patchstack
added 2010/05/05 12:00 a.m.13 views

WordPress Cimy Counter Plugin 0.9.4 - HTTP Response Splitting and Cross-Site Scripting Vulnerabilities

This Cimy Counter plugin is prone to HTTP response-splitting and a cross-site scripting vulnerabilities. It fails properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

0.9AI score
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2010/04/23 12:00 a.m.21 views

Ipswitch WS_FTP Professional < 12.2 'HTTP' Response Format String Vulnerability

Ipswitch WSFTP Professional is prone to a format string vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

4.3CVSS6.6AI score0.05608EPSS
SaveExploits2References5
Prion
Prion
added 2010/04/21 2:30 p.m.15 views

Format string

Format string vulnerability in Ipswitch WSFTP Professional 12 before 12.2 allows remote attackers to cause a denial of service crash via format string specifiers in the status code portion of an HTTP response...

4.3CVSS7.3AI score0.05608EPSS
SaveExploits2References5Affected Software1
NVD
NVD
added 2010/04/21 2:30 p.m.20 views

CVE-2009-4775

Format string vulnerability in Ipswitch WSFTP Professional 12 before 12.2 allows remote attackers to cause a denial of service crash via format string specifiers in the status code portion of an HTTP response...

4.3CVSS6.7AI score0.05608EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2010/04/21 2:00 p.m.27 views

CVE-2009-4775

Format string vulnerability in Ipswitch WSFTP Professional 12 before 12.2 allows remote attackers to cause a denial of service crash via format string specifiers in the status code portion of an HTTP response...

6.7AI score0.05608EPSS
SaveExploits2References5
OpenVAS
OpenVAS
added 2010/04/16 12:00 a.m.28 views

Mandriva Update for cups MDVSA-2010:073-1 (cups)

Check for the Version of cups OpenVAS Vulnerability Test Mandriva Update for cups MDVSA-2010:073-1 cups Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

6.9CVSS5.7AI score0.0578EPSS
SaveExploits7References2
Tenable Nessus
Tenable Nessus
added 2010/04/15 12:00 a.m.34 views

Mandriva Linux Security Advisory : cups (MDVSA-2010:073-1)

Multiple vulnerabilities has been found and corrected in cups : CUPS in does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a the product's web interface,...

7.5CVSS6.3AI score0.0578EPSS
SaveExploits7References4
Prion
Prion
added 2010/04/05 5:30 p.m.27 views

Code injection

Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute...

5.1CVSS7.3AI score0.03275EPSS
SaveExploits0References25Affected Software3
NVD
NVD
added 2010/04/05 5:30 p.m.27 views

CVE-2010-0179

Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute...

5.1CVSS7AI score0.03275EPSS
SaveExploits0References25
Tenable Nessus
Tenable Nessus
added 2010/03/29 12:00 a.m.16 views

Interchange HTTP Response Splitting Vulnerability

Binary data 5488.prm...

7.3AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2010/03/25 12:00 a.m.28 views

Interchange HTTP Response Splitting Vulnerability

Interchange is prone to an HTTP response-splitting vulnerability. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into a false sense of trust. Interchange versions...

7.2AI score
SaveExploits0References3
OpenVAS
OpenVAS
added 2010/03/25 12:00 a.m.13 views

Interchange HTTP Response Splitting Vulnerability

Interchange is prone to an HTTP response-splitting vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

7.3AI score
SaveExploits0References3
seebug.org
seebug.org
added 2010/03/21 12:00 a.m.19 views

IBM Lotus 6.x HTTP Response Splitting Vulnerability

No description provided by source. ========================================= Yaniv Miron aka "Lament" Advisory March 12, 2010 IBM Lotus 6.x HTTP Response Splitting Vulnerability ========================================= ===================== I. BACKGROUND ===================== IBM Lotus Software...

7.1AI score
SaveExploits0
securityvulns
securityvulns
added 2010/03/21 12:00 a.m.41 views

IBM Lotus 6.x HTTP Response Splitting Vulnerability

========================================= Yaniv Miron aka "Lament" Advisory March 12, 2010 IBM Lotus 6.x HTTP Response Splitting Vulnerability ========================================= ===================== I. BACKGROUND ===================== IBM Lotus Software delivers robust collaboration...

0.2AI score
SaveExploits0
zdt
zdt
added 2010/03/20 12:00 a.m.24 views

IBM Lotus 6.x HTTP Response Splitting Vulnerability

Exploit for unknown platform in category web applications =================================================== IBM Lotus 6.x HTTP Response Splitting Vulnerability =================================================== ===================== I. BACKGROUND ===================== IBM Lotus Software delive...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2010/03/20 12:00 a.m.30 views

IBM Lotus 6.x HTTP Response Splitting

========================================= Yaniv Miron aka "Lament" Advisory March 12, 2010 IBM Lotus 6.x HTTP Response Splitting Vulnerability ========================================= ===================== I. BACKGROUND ===================== IBM Lotus Software delivers robust collaboration...

7.4AI score
SaveExploits0
Rows per page
Query Builder