Lucene search
+L

2966 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-5583

Malicious code in bioql PyPI...

5CVSS5.9AI score0.0156EPSS
SaveExploits0References11
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2022-3773

Malicious code in bioql PyPI...

5.9CVSS6.7AI score0.01179EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-1886

Malicious code in bioql PyPI...

6.9CVSS5.9AI score0.00409EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/09/04 12:00 a.m.•21 views

Unspecified Vulnerability in Akinsoft QR Menü

Akinsoft QR Menü is a digitized QR code menu system from Akinsoft Turkey. Akinsoft QR Menü s versions prior to 1.05.05 to v1.05.12 contain a security vulnerability that originates from improper certificate validation, which can be exploited by an attacker to cause HTTP response splitting...

7.3CVSS5.7AI score0.00153EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/02 12:15 p.m.•20 views

CVE-2024-12973

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS0.00149EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/02 12:00 a.m.•6 views

CVE-2024-12973: Origin Validation Error

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS5.8AI score0.00149EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/01 1:15 p.m.•16 views

CVE-2024-12925

Improper Validation of Certificate with Host Mismatch vulnerability in Akınsoft QR Menü allows HTTP Response Splitting. This issue affects QR Menü: from s1.05.05 before v1.05.12...

7.3CVSS0.00153EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/01 12:39 p.m.•30 views

CVE-2024-12925

CVE-2024-12925 concerns Akınsoft QR Menü. Multiple connected sources confirm a vulnerability in versions s1.05.05 through v1.05.11 due to improper validation of certificates with host mismatch, enabling HTTP response splitting. The issue originates in the certificate-host validation logic for the...

7.3CVSS5.8AI score0.00153EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/09/01 12:39 p.m.•27 views

CVE-2024-12925 Host Header Injection in Akinsoft's QR Menu

Improper Validation of Certificate with Host Mismatch vulnerability in Akınsoft QR Menü allows HTTP Response Splitting. This issue affects QR Menü: from s1.05.05 before v1.05.12...

7.3CVSS0.00153EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/01 12:00 a.m.•7 views

CVE-2024-12925: Improper Validation of Certificate with Host Mismatch

Improper Validation of Certificate with Host Mismatch vulnerability in Akınsoft QR Menü allows HTTP Response Splitting. This issue affects QR Menü: from s1.05.05 before v1.05.12...

7.3CVSS5.8AI score0.00153EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/09/01 12:00 a.m.•16 views

PT-2025-35481

Name of the Vulnerable Software and Affected Versions: Akınsoft QR Menü versions s1.05.05 through v1.05.11 Description: Improper validation of certificates with host mismatch in Akınsoft QR Menü allows for HTTP Response Splitting. Recommendations: Update Akınsoft QR Menü to version 1.05.12 or lat...

7.3CVSS6.4AI score0.00153EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2020-11709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the setredirect and setheader functions, which creates possibilities for CRLF injection...

7.5CVSS7.5AI score0.01684EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2025/08/29 1:15 a.m.•9 views

DEBIAN-CVE-2025-40927

CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw This vulnerability is a confirmed HTTP response splitting flaw in CGI::Simple that allows HTTP response header injection, which can be used for reflected XSS or open redirect under certain conditions. Although some...

7.3CVSS5.5AI score0.00466EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/29 12:00 a.m.•5 views

CVE-2025-40927: Improper Neutralization of CRLF Sequences in HTTP Headers

CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw This vulnerability is a confirmed HTTP response splitting flaw in CGI::Simple that allows HTTP response header injection, which can be used for reflected XSS or open redirect under certain conditions. Although some...

7.3CVSS5.6AI score0.00466EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2017-7443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0ad...

6.1CVSS6.3AI score0.00714EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/21 12:00 a.m.•8 views

F5 Networks BIG-IP : Apache HTTP server vulnerability (K000153074)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4 / 21.0.0.1. It is, therefore, affected by a vulnerability as referenced in the K000153074 advisory. HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the...

7.5CVSS6.7AI score0.03914EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/08/12 4:38 p.m.•20 views

Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities due to the included Apache HTTP Server

Summary There are multiple vulnerabilities in Apache HTTP Server which affect the IBM HTTP Server used by IBM WebSphere Application Server. Vulnerability Details CVEID:CVE-2024-43204 DESCRIPTION: SSRF in Apache HTTP Server with modproxy loaded allows an attacker to send outbound proxy requests to...

7.5CVSS6.4AI score0.01272EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/05 12:00 a.m.•18 views

SUSE SLED15: apache2 / apache2-devel / apache2-event / apache2-manual / etc (SUSE-SU-2025:02684-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02684-1 advisory. - CVE-2024-42516: Fixed HTTP response splitting. bsc1246477 - CVE-2024-43204: Fixed a SSRF when...

9.1CVSS7.2AI score0.04963EPSS
SaveExploits3References22
SUSE Linux
SUSE Linux
•added 2025/08/04 3:06 p.m.•49 views

Security update for apache2

This update for apache2 fixes the following issues: CVE-2024-42516: Fixed HTTP response splitting. bsc1246477 CVE-2024-43204: Fixed a SSRF when modproxy is loaded that allows an attacker to send outbound proxy requests to a URL controlled by them. bsc1246305 CVE-2024-47252: Fixed insufficient...

8.8CVSS7AI score0.04963EPSS
SaveExploits3References28
Tenable Nessus
Tenable Nessus
•added 2025/08/04 12:00 a.m.•33 views

Amazon Linux 2 : httpd (ALAS-2025-2958)

The version of httpd installed on the remote host is prior to 2.4.64-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2958 advisory. HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response...

9.1CVSS6.6AI score0.04963EPSS
SaveExploits3References16
Rows per page
Query Builder