49666 matches found
httpd: incomplete fix for CVE-2023-38709
A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers. These issues lead to HTTP response splitting. This CVE provides a "complete" fix for CVE-2023-38709...
PT-2026-65435
Name of the Vulnerable Software and Affected Versions cowlib versions 2.0.0 through 2.18.x Description An unauthenticated remote HTTP/2 or HTTP/3 peer can cause a denial of service by exhausting memory on a server or client. The issue exists in the HPACK and QPACK prefixed-integer decoder cow hpa...
PT-2026-65436
Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. The HTTP/1.1 handler in cowboy http enforces the max headers limit by counting the number of distinct header names i...
ROS-20260728-73-0009
The vulnerability of the HTTP/2 header processing module in the Apache HTTP Server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
EUVD-2026-49864
schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the HTTP request header construction logic. The application dynamically splices attacker-controlled host name, path, query string, and multiple HTTP header fields into a fixed psptr heap buffer without proper size...
CVE-2026-51271
In the provided documents, CVE-2026-51271 is linked to the schreibfaul1 ESP32-audioI2S 3.4.5 component. The reported vulnerability is a heap-based buffer overflow in the WAV header parsing function read_WAV_Header(). The function reads untrusted chunk size and bytes-to-skip values directly from m...
EUVD-2026-49892
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow vulnerability exists in the WAV header parsing function readWAVHeader. The function reads untrusted chunk size and bytes-to-skip value directly from malicious WAV files without reasonable range restriction. Abnormally large bts an...
PT-2026-65512
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow vulnerability exists in the WAV header parsing function read WAV Header. The function reads untrusted chunk size and bytes-to-skip value directly from malicious WAV files without reasonable range restriction. Abnormally large bts...
CVE-2026-51266
...
PT-2026-65576
SuperPlane before 0.30.0 contains an SMTP header injection vulnerability that allows unauthenticated attackers to inject arbitrary SMTP headers by including CRLF sequences in the event payload title field delivered via webhook. Attackers can manipulate the unsanitized title field passed to the SM...
PT-2026-65643
Summary GET /cosmos/api/constellation/public-devices discloses Constellation device metadata to a requester that supplies any non-empty Authorization header. The handler strips the string Bearer from the header but never validates the resulting token and never uses it in the database query. This...
PT-2026-65635
Summary The Constellation-tunnel bypass branch in tokenMiddleware at src/proxy/routerGen.go:53-66 returns to the upstream handler before the request's x-cosmos-user, x-cosmos-role, x-cosmos-user-role, and x-cosmos-mfa headers are stripped at lines 68-72, and before the AdminOnlyWithRedirect gate ...
ALSA-2026:47057 Important: nodejs:24 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malform...
ALSA-2026:47058 Important: nodejs:22 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malform...
PT-2026-65454
Name of the Vulnerable Software and Affected Versions openshift/oauth-proxy affected versions not specified Description A flaw exists where the proxy sets authenticated identity headers using dash-variant keys, such as 'X-Forwarded-User', but fails to strip underscore-variant keys, such as 'X...
CVE-2026-51266
CVE-2026-51266 is rejected/not used and does not represent an active vulnerability entry.
PT-2026-65517
Name of the Vulnerable Software and Affected Versions Rouille versions 0.4.0 through 3.6.2 Description An HTTP response splitting issue exists where remote attackers can inject arbitrary response headers by embedding carriage return 0x0D or line feed 0x0A bytes into input they control. This can...
PT-2026-65507
schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the HTTP request header construction logic. The application dynamically splices attacker-controlled host name, path, query string, and multiple HTTP header fields into a fixed ps ptr heap buffer without proper siz...
PT-2026-65523
tiny-http through 0.12.0 contains an HTTP header injection vulnerability that allows attackers to inject carriage return 0x0D and line feed 0x0A bytes into HTTP header values on both request and response sides due to insufficient validation in header parsing and serialization. Attackers can explo...