Lucene search
+L

309 matches found

osv_debian
osv_debian
•added 2019/12/10 6:15 p.m.•74 views

DEBIAN-CVE-2016-1000107

inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an...

6.1CVSS6.5AI score0.01475EPSS
SaveExploits0References1
Prion
Prion
•added 2019/12/10 6:15 p.m.•30 views

Design/Logic Flaw

inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an...

5.8CVSS7.2AI score0.01475EPSS
SaveExploits0References4Affected Software1
osv_ubuntu
osv_ubuntu
•added 2019/12/10 6:15 p.m.•26 views

UBUNTU-CVE-2016-1000107

inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an...

6.1CVSS6AI score0.01475EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2019/12/10 6:15 p.m.•36 views

CVE-2016-1000107

inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an...

6.1CVSS6.3AI score0.01475EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/12/10 5:32 p.m.•58 views

CVE-2016-1000107

inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an...

6.4AI score0.01475EPSS
SaveExploits0References4
CVE
CVE
•added 2019/12/10 5:32 p.m.•105 views

CVE-2016-1000107

CVE-2016-1000107 is described across multiple feeds as an httpoxy-style vulnerability in Erlang’s inets component, affecting Erlang versions possibly 22.1 and earlier. The issue arises because inets follows RFC 3875 section 4.1.18 and does not guard against untrusted client data in the HTTP_PROXY...

6.1CVSS6.3AI score0.01475EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2019/12/10 5:32 p.m.•8 views

CVE-2016-1000107

inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an...

6.1CVSS0.01475EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2019/12/10 5:32 p.m.•85 views

CVE-2016-1000107

inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an...

6.1CVSS6.4AI score0.01475EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/10 12:00 a.m.•3 views

CVE-2016-1000107: URL Redirection to Untrusted Site

inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an...

6.1CVSS6.5AI score0.01475EPSS
SaveExploits0References2
Rows per page
Query Builder