CVE-2021-25179: Improper Neutralization of Input During Web Page Generation

SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...

PT-2021-16450

Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U versions prior to 15.2 Description: The issue is related to Cross Site Scripting XSS that can be triggered via the HTTP Host header. Recommendations: For versions prior to 15.2, update to version 15.2 or later to resolve the...

Denial of Service (DoS) in restify-paginate

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

GHSA-QR9H-VR5P-PWWX Denial of Service (DoS) in restify-paginate

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

Denial Of Service (DoS)

restify-paginate is vulnerable to denial of service. An attacker is able to crash the application by omitting the HTTP Host header in the HTTP request...

CVE-2020-27543

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

CVE-2020-27543

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

CVE-2020-27543

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

CVE-2020-27543: Improper Handling of Exceptional Conditions

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

PT-2021-11405

Name of the Vulnerable Software and Affected Versions: restify-paginate version 0.0.5 Description: The issue allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header, resulting in a Restify-based web service crashing with an uncaught exception. Recommendations: For...

CVE-2020-12145: Improper Authentication

Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API calls from localhost. This makes it possible to log in to Orchestrator by introducing an HTTP HOST header set to 127.0.0.1 or localhost. Orchestrator instances that are hosted ...

Design/Logic Flaw

eramba through c2.8.1 allows HTTP Host header injection with for example resultant wkhtml2pdf PDF printing by authenticated users...

CVE-2020-28031

CVE-2020-28031 affects eramba up to version 2.8.1, where HTTP Host header injection is possible. The impact described is that authenticated users can leverage wkhtml2pdf to print PDFs due to this header manipulation. The provided connected sources confirm the vulnerability description but do not ...

CVE-2020-28031: Improper Input Validation

eramba through c2.8.1 allows HTTP Host header injection with for example resultant wkhtml2pdf PDF printing by authenticated users...

PT-2020-16903

Name of the Vulnerable Software and Affected Versions eramba versions through c2.8.1 Description The issue allows HTTP Host header injection, which can result in wkhtml2pdf PDF printing by authenticated users. Recommendations For versions through c2.8.1, consider restricting access to authenticat...

CVE-2020-26161

In Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a modified HTTP Host header...

Design/Logic Flaw

In Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a modified HTTP Host header...

CVE-2020-26161

In Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a modified HTTP Host header...

CVE-2020-26161: URL Redirection to Untrusted Site

In Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a modified HTTP Host header...

PT-2020-16318

Name of the Vulnerable Software and Affected Versions Octopus Deploy versions through 2020.4.2 Description An issue exists where an attacker could redirect users to an external site via a modified HTTP Host header. Recommendations For versions through 2020.4.2, update to a version later than...