Lucene search
+L

4685 matches found

osv_ubuntu
osv_ubuntu
•added 2021/02/11 6:15 p.m.•19 views

UBUNTU-CVE-2021-21299

hyper is an open-source HTTP library for Rust crates.io. In hyper from version 0.12.0 and before versions 0.13.10 and 0.14.3 there is a vulnerability that can enable a request smuggling attack. The HTTP server code had a flaw that incorrectly understands some requests with multiple...

8.1CVSS7.2AI score0.04732EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2021/02/11 6:00 p.m.•88 views

CVE-2021-21299

hyper is an open-source HTTP library for Rust crates.io. In hyper from version 0.12.0 and before versions 0.13.10 and 0.14.3 there is a vulnerability that can enable a request smuggling attack. The HTTP server code had a flaw that incorrectly understands some requests with multiple...

8.1CVSS8AI score0.04732EPSS
SaveExploits0
Mend
Mend
•added 2021/02/11 6:00 p.m.•5 views

CVE-2021-21299

hyper is an open-source HTTP library for Rust crates.io. In hyper from version 0.12.0 and before versions 0.13.10 and 0.14.3 there is a vulnerability that can enable a request smuggling attack. The HTTP server code had a flaw that incorrectly understands some requests with multiple...

8.1CVSS0.04732EPSS
SaveExploits0References7
CVE
CVE
•added 2021/02/11 6:00 p.m.•117 views

CVE-2021-21299

CVE-2021-21299 affects the Rust HTTP library hyper. The vulnerability resides in hyper’s HTTP server code, which may misinterpret requests with multiple Transfer-Encoding headers, potentially treating the payload as chunked when it should be illegal. Exploitation requires three conditions to be m...

8.1CVSS6.4AI score0.04732EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/11 12:00 a.m.•7 views

CVE-2021-21299: Inconsistent Interpretation of HTTP Requests

hyper is an open-source HTTP library for Rust crates.io. In hyper from version 0.12.0 and before versions 0.13.10 and 0.14.3 there is a vulnerability that can enable a request smuggling attack. The HTTP server code had a flaw that incorrectly understands some requests with multiple...

8.1CVSS5.7AI score0.04732EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/02/11 12:00 a.m.•21 views

hyper crate for Rust environment issue vulnerability

hyper crate for Rust is a Rust-based HTTP library. An environmental issue vulnerability exists in hyper crate for Rust that arises from an unreasonable environmental factor in a networked system or product...

8.1CVSS7.2AI score0.04732EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2021/02/10 12:00 a.m.•4 views

PT-2021-17200

Name of the Vulnerable Software and Affected Versions: hyper versions prior to 0.13.10 hyper versions 0.14.x prior to 0.14.3 Description: An issue was discovered in the hyper crate where request smuggling can occur when more than one Transfer-Encoding header is sent. Recommendations: For hyper...

5.8AI score
SaveExploits0References2
NVD
NVD
•added 2021/02/09 5:15 p.m.•38 views

CVE-2021-25140

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

10CVSS0.12012EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/02/09 4:04 p.m.•41 views

CVE-2021-25139

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

10AI score0.07876EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2021/02/05 12:00 p.m.•10 views

a2 (>=0.5.0-alpha.6, <=0.5.0-alpha.7), anitable (0.1.0) +66 more potentially affected by CVE-2021-21299 via hyper (>=0.13.0-alpha.1, <=0.13.7)

hyper CARGO version =0.13.0-alpha.1, =0.5.0-alpha.6, =0.1.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.31.1 and more Source cves: CVE-2021-21299 Source advisory: OSV:RUSTSEC-2021-0020...

8.1CVSS7.8AI score0.04732EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/02/05 12:00 p.m.•8 views

easy-http-request (>=0.0.5, <=0.1.0), epic-wallet-rust-python (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2021-21299 via hyper (>=0.12.12, <=0.12.19)

hyper CARGO version =0.12.12, =0.0.5, =0.1.0, =0.1.0, =3.3.2, =3.3.2, =3.3.2, =3.0.0, =3.0.0, =3.0.0, =3.0.5 Source cves: CVE-2021-21299 Source advisory: OSV:RUSTSEC-2021-0020...

8.1CVSS7.8AI score0.04732EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/02/05 12:00 a.m.•2 views

PT-2021-14399

Name of the Vulnerable Software and Affected Versions: hyper versions 0.12.0 through 0.13.9 hyper versions 0.14.0 through 0.14.2 Description: The HTTP server code in hyper has a flaw that incorrectly understands some requests with multiple transfer-encoding headers to have a chunked payload, when...

8.1CVSS0.04732EPSS
SaveExploits0References21
RedHat Linux
RedHat Linux
•added 2021/02/02 12:16 p.m.•230 views

Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

7.2CVSS6.7AI score0.01347EPSS
SaveExploits1References5
IBM Security Bulletins
IBM Security Bulletins
•added 2021/01/29 6:29 p.m.•40 views

Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty affects IBM Spectrum Protect Backup-Archive Client web user interface, IBM Spectrum Protect for Space Management, and IBM Spectrum Protect for Virtual Environments

Summary A vulnerability IBM WebSphere Application Server Liberty could allow an attacker to obtain sensitive information. This vulnerability may affect the IBM Spectrum Protect Backup-Archive Client web user interface, IBM Spectrum Protect for Space Management, and IBM Spectrum Protect for Virtua...

4.3CVSS1.1AI score0.0112EPSS
SaveExploits0Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/01/26 12:00 a.m.•17 views

Hyper-V Hardware Virtualization DoS

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.7CVSS7.2AI score0.04244EPSS
SaveExploits0References2
NVD
NVD
•added 2021/01/12 8:15 p.m.•20 views

CVE-2021-1704

Windows Hyper-V Elevation of Privilege Vulnerability...

7.8CVSS7.8AI score0.01025EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/01/12 8:15 p.m.•6 views

CVE-2021-1704

Windows Hyper-V Elevation of Privilege Vulnerability...

7.3CVSS5.8AI score0.01025EPSS
SaveExploits0References2
NVD
NVD
•added 2021/01/12 8:15 p.m.•23 views

CVE-2021-1691

Windows Hyper-V Denial of Service Vulnerability...

7.7CVSS8AI score0.04069EPSS
SaveExploits0References2
NVD
NVD
•added 2021/01/12 8:15 p.m.•16 views

CVE-2021-1692

Windows Hyper-V Denial of Service Vulnerability...

7.7CVSS8AI score0.04244EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/01/12 8:15 p.m.•8 views

CVE-2021-1691

Windows Hyper-V Denial of Service Vulnerability...

7.7CVSS7.1AI score0.04069EPSS
SaveExploits0References2
Rows per page
Query Builder