CVE-2019-15276

CVE-2019-15276: Cisco Wireless LAN Controller HTTP parsing DoS . The vulnerability affects Cisco WLC software (versions 8.4–8.9, 8.10 fixed) where the HTTP parsing engine fails to handle specially crafted URLs. An attacker with low privileges (or a user who can be lured to click a crafted URL) ca...

CVE-2019-15276 Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability

A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists due to a failure of the HTTP parsing engine to handle specially...

CVE-2019-15276: Improper Input Validation

A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists due to a failure of the HTTP parsing engine to handle specially...

PT-2019-3971

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller Software affected versions not specified Description A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of...

UBUNTU-CVE-2019-17420

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

PT-2019-15145

Name of the Vulnerable Software and Affected Versions OISF LibHTP versions prior to 0.5.31 Suricata version 4.1.4 Description An HTTP protocol parsing error occurs in the affected software, causing the http header signature to not alert on a response with a single r ending. Recommendations For OI...

DEBIAN-CVE-2019-15892

An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Servic...

CVE-2019-0670

A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing Vulnerability'...

Spoofing

A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing Vulnerability'...

Exploit for Out-of-bounds Write in Live555 Live555_Media_Server

Live Networks LIVE555 streaming media RTSPServer lookForHeader...

Microsoft Edge Spoofing Vulnerability (CNVD-2018-18474)

Microsoft Edge is a Web browser developed by the American company Microsoft Microsoft. A spoofing vulnerability exists in Microsoft Edge. The vulnerability stems from the program not properly parsing HTTP content. A remote attacker could exploit the vulnerability by leveraging a specially crafted...

PHP 7.x < 7.0.27, 7.1.x < 7.1.13, 7.2.0 Unspecified Vulnerability - Windows

PHP is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

PHP 7.x < 7.0.27, 7.1.x < 7.1.13, 7.2.0 Unspecified Vulnerability - Linux

PHP is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

10er10 (0.23.0), 10tcl (>=0.0.1, <=0.0.10) +3192 more potentially affected by CVE-2018-3717 via connect (>=2.0.0, <=2.13.1)

connect NPM version =2.0.0, =0.0.1, =0.0.1, =0.0.1, =1.0.1, =0.25.0, =1.0.4, =0.0.5, =0.0.2, =1.0.0, =3.2.63 and more Source cves: CVE-2018-3717 Source advisory: OSV:GHSA-RCH9-XH7R-MQGW...

Microsoft Edge Spoofing (CVE-2018-8278)

A spoofing vulnerability exists in Microsoft Edge. The vulnerability is due to improper parsing of HTTP content. A remote attacker could trick a user by redirecting them to a specially crafted website which could spoof content or be used as a pivot to chain an attack with other vulnerabilities in...

Buffer overflow

A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox ...

AZL-40842 CVE-2018-7159 affecting package rubygem-http_parser for versions less than 0.8.0-1

The HTTP parser in all current versions of Node.js ignores spaces in the Content-Length header, allowing input such as Content-Length: 1 2 to be interpreted as having a value of 12. The HTTP specification does not allow for spaces in the Content-Length value and the Node.js HTTP parser has been...

CVE-2018-6547

The CVE-2018-6547 entry concerns AMD driver-installation packages and the plays.tv service (plays_service.exe) prior to version 1.27.7.0. Affected component is an HTTP message parsing function that accepts a user-defined path and writes non-user-controlled data as SYSTEM to a file when the extrac...

Stack overflow

In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the phpstreamurlwraphttpex function in ext/standard/httpfopenwrapper.c. This subsequently results in copying a large string...

CVE-2018-7584

CVE-2018-7584 is a stack-based buffer under-read in PHP (affecting PHP 5.6.33, 7.0.x before 7.0.28, 7.1.x before 7.1.14, and 7.2.x before 7.2.2) during HTTP response parsing in php_stream_url_wrap_http_ex (ext/standard/http_fopen_wrapper.c), which can lead to copying a large string. Public disclo...