Lucene search
K

3704 matches found

Exploit DB
Exploit DB
added 2012/04/16 12:0 a.m.22 views

McAfee Web Gateway 7.1.5.x - 'Host' HTTP Header Security Bypass

source: https://www.securityfocus.com/bid/53015/info McAfee Web Gateway is prone to a security-bypass vulnerability because it fails to properly enforce filtering rules. A successful attack will allow an attacker to bypass intended security restrictions; this may aid in other attacks. McAfee Web...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2012/04/04 12:0 a.m.31 views

Apache Traffic Server 3.0.x < 3.0.4 / 3.1.x < 3.1.3 Host HTTP Header Parsing Remote Overflow

According to its banner, the version of Apache Traffic Server running on the remote host is 3.0.x prior to 3.0.4 or 3.1.x prior to 3.1.3. It is, therefore, affected by a heap-based buffer overflow vulnerability when handling malicious HTTP host headers. A remote, unauthenticated attacker can...

5CVSS6.4AI score0.01643EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2012/03/29 12:0 a.m.19 views

at32 Reverse Proxy Multiple HTTP Header Fields DoS Vulnerability

at32 Reverse Proxy is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.6AI score0.00746EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2012/03/21 12:0 a.m.37 views

nginx < 1.0.14 / 1.1.17 HTTP Header Response Memory Disclosure

The remote web server is running nginx, a lightweight, high performance web server / reverse proxy and email IMAP/POP3 proxy. According to its Server response header, the installed version of nginx is earlier than 1.0.14 or is 1.1.x before 1.1.17 and is, therefore, affected by a memory disclosure...

5CVSS5.4AI score0.04101EPSS
Exploits1References5
securityvulns
securityvulns
added 2012/03/20 12:0 a.m.48 views

at32 ReverseProxy - Multiple HTTP Header Field Denial Of Service Vulnerability

Title: at32 Reverse Proxy - Multiple HTTP Header Field Denial Of Service Vulnerability Product : at32 Reverse Proxy Version : v1.060.310 Vendor: http://www.at32.com/doc/rproxy.htm Class: Boundary Condition Error CVE: Remote: Yes Local: No Published: 2012-03-14 Updated: Impact : Medium CVSS2 Base ...

0.8AI score
Exploits0
Packet Storm
Packet Storm
added 2012/03/19 12:0 a.m.16 views

at32 Reverse Proxy 1.060.310 Denial Of Service

Title: at32 Reverse Proxy - Multiple HTTP Header Field Denial Of Service Vulnerability Product : at32 Reverse Proxy Version : v1.060.310 Vendor: http://www.at32.com/doc/rproxy.htm Class: Boundary Condition Error CVE: Remote: Yes Local: No Published: 2012-03-14 Updated: Impact : Medium CVSS2 Base ...

Exploits0
Tenable Nessus
Tenable Nessus
added 2012/03/16 12:0 a.m.34 views

Mozilla Thunderbird 10.x < 10.0.3 Multiple Vulnerabilities

Binary data 801370.prm...

9.3CVSS9.8AI score0.07333EPSS
Exploits1References21
Tenable Nessus
Tenable Nessus
added 2012/03/16 12:0 a.m.26 views

Mozilla Thunderbird 10.x < 10.0.3 Multiple Vulnerabilities

Binary data 6352.prm...

9.3CVSS9.8AI score0.07333EPSS
Exploits1References21
Tenable Nessus
Tenable Nessus
added 2012/03/15 12:0 a.m.37 views

Mozilla SeaMonkey 2.x < 2.8 Multiple Vulnerabilities

Binary data 801337.prm...

9.3CVSS9.8AI score0.07333EPSS
Exploits1References21
Tenable Nessus
Tenable Nessus
added 2012/03/15 12:0 a.m.39 views

Thunderbird 10.0.x < 10.0.3 Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird 10.0.x is potentially affected by the following security issues : - Multiple memory corruption issues. By tricking a user into visiting a specially crafted page, these issues may allow an attacker to execute arbitrary code in the context of the affected...

9.3CVSS8.6AI score0.07333EPSS
Exploits1References20
Tenable Nessus
Tenable Nessus
added 2012/03/15 12:0 a.m.35 views

Firefox < 10.0.3 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is earlier than 10.0.3 and thus, is potentially affected by the following security issues : - Multiple memory corruption issues. By tricking a user into visiting a specially crafted page, these issues may allow an attacker to execute arbitrary code in the context ...

9.3CVSS7.6AI score0.07333EPSS
Exploits1References20
Tenable Nessus
Tenable Nessus
added 2012/03/15 12:0 a.m.34 views

Firefox 10.0.x < 10.0.3 Multiple Vulnerabilities

The installed version of Firefox 10.0.x is potentially affected by the following security issues : - Multiple memory corruption issues. By tricking a user into visiting a specially crafted page, these issues may allow an attacker to execute arbitrary code in the context of the affected applicatio...

9.3CVSS8.6AI score0.07333EPSS
Exploits1References20
Tenable Nessus
Tenable Nessus
added 2012/03/15 12:0 a.m.40 views

Mozilla Firefox 10.x < 10.0.3 Multiple Vulnerabilities

Binary data 801284.prm...

9.3CVSS9.8AI score0.07333EPSS
Exploits1References21
Tenable Nessus
Tenable Nessus
added 2012/03/15 12:0 a.m.38 views

SeaMonkey 2.x < 2.8 Multiple Vulnerabilities

Binary data 6354.prm...

9.3CVSS9.8AI score0.07333EPSS
Exploits1References21
Tenable Nessus
Tenable Nessus
added 2012/03/15 12:0 a.m.225 views

Mozilla Firefox ESR 10.x < 10.0.3 Multiple Vulnerabilities

Binary data 6350.prm...

9.3CVSS9.8AI score0.07333EPSS
Exploits1References21
Tenable Nessus
Tenable Nessus
added 2012/03/15 12:0 a.m.265 views

SeaMonkey < 2.8.0 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.8.0. Such versions are potentially affected by the following security issues : - Multiple memory corruption issues. By tricking a user into visiting a specially crafted page, these issues may allow an attacker to execute arbitrary code in the...

9.3CVSS7.5AI score0.07333EPSS
Exploits1References20
Tenable Nessus
Tenable Nessus
added 2012/03/15 12:0 a.m.36 views

Mozilla Thunderbird 10.0.x < 10.0.3 Multiple Vulnerabilities

The installed version of Thunderbird 10.0.x is potentially affected by the following security issues : - Multiple memory corruption issues. By tricking a user into visiting a specially crafted page, these issues may allow an attacker to execute arbitrary code in the context of the affected...

9.3CVSS8.6AI score0.07333EPSS
Exploits1References20
Atlassian
Atlassian
added 2012/03/01 1:59 a.m.22 views

open redirect in flushcache.action

A skipfish scan of confluence found that flushcache.action is vulnerable to 'open redirect' as the returlUrl seems to send up in the Location HTTP header on a 302 redirect response. Note the token parameter in the here is an example attack using the flaw...

0.1AI score
Exploits0
Atlassian
Atlassian
added 2012/03/01 1:59 a.m.16 views

open redirect in flushcache.action

A skipfish scan of confluence found that flushcache.action is vulnerable to 'open redirect' as the returlUrl seems to send up in the Location HTTP header on a 302 redirect response. Note the token parameter in the here is an example attack using the flaw...

0.1AI score
Exploits0Affected Software1
securityvulns
securityvulns
added 2012/02/22 12:0 a.m.43 views

Mercurycom MR804 Router - Multiple HTTP Header Fields Denial Of Service Vulnerability

Title: Mercurycom MR804 Router - Multiple HTTP Header Fields Denial Of Service Vulnerability Product : Mercurycom MR804 Router Hardware Version : MR804 v8.0 081C3113 Software Version : 3.8.1 Build 101220 Rel.53006nB Vendor: http://www.mercurycom.com.cn/ Class: Boundary Condition Error CVE: Remote...

0.4AI score
Exploits0
Rows per page
Query Builder