3 matches found
CVE-2025-52647
The BigFix WebUI application responds with HOST information from the HTTP header field making it vulnerable to Host Header Poisoning Attacks...
6.1CVSS6.7AI score0.00181EPSS
SaveExploits0References1
Information Disclosure
grafana is vulnerable to information disclosure. The vulnerability is due to the proxy endpoints leaking sensitive authentication tokens to some destination plugins which allows an attacker to gain access to HTTP header information...
7.5CVSS7.5AI score0.01285EPSS
SaveExploits0References7Affected Software2
CVE-2011-3375
Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by readin...
5CVSS6.3AI score0.06694EPSS
SaveExploits2References6
20