4641 matches found
DEBIAN-CVE-2020-1695
A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to...
UBUNTU-CVE-2020-1695
A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to...
HTTP Host Header Injection
A host header injection is inserting both the carriage return and linefeed characters into user input to trick the server. Successful exploitation could allow attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks...
Cisco Umbrella Injection Vulnerability
Cisco Umbrella is a suite of cloud security platforms from Cisco. The platform prevents cyber threats such as phishing, malware and ransomware. Cisco Umbrella suffers from an injection vulnerability that stems from the program not adequately validating user-submitted input. An attacker could...
CoSoSys Endpoint Protector Injection Vulnerability
CoSoSys Endpoint Protector is a cross-platform data loss prevention system from CoSoSys Romania. The system supports USB and peripheral port control, dynamic data scanning, USB encryption and static data scanning. An injection vulnerability exists in CoSoSys Endpoint Protector version 5.1.0.2,...
CVE-2019-13285
CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection...
CVE-2019-13285
CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection...
Design/Logic Flaw
CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection...
CVE-2019-13285
CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection...
CVE-2019-13285
CVE-2019-13285 affects CoSoSys Endpoint Protector 5.1.0.2, as shown by multiple connected records. The vulnerability is described as a Host Header Injection in Endpoint Protector; the available sources do not provide detailed exploitation vectors or affected components beyond the general product/...
CVE-2019-12425
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...
CVE-2019-12425
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...
Design/Logic Flaw
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...
CVE-2019-12425
CVE-2019-12425 affects Apache OFBiz 17.12.01 and is described as a Host header injection vulnerability caused by accepting arbitrary Host headers. This is documented across multiple sources (e.g., NVD entry and Red Hat, CNVD, OSV, CVE lists) with the consistent description that OFBiz 17.12.01 is ...
CVE-2019-12425
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...
ruby: HTTP response splitting in WEBrick
It was found that WEBrick did not sanitize headers sent back to clients, resulting in a response-splitting vulnerability. An attacker, able to control the server's headers, could force WEBrick into injecting additional headers to a client...
OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Lightweight HTTP Server. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network acce...
CVE-2020-11814
A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites...