119 matches found
CVE-2024-31617
OpenLiteSpeed before 1.8.1 mishandles chunked encoding...
CVE-2024-31617
OpenLiteSpeed before 1.8.1 mishandles chunked encoding...
Litespeed Technologie OpenLiteSpeed 安全漏洞
Litespeed Technologie OpenLiteSpeed is an open source web server from Litespeed Technologie. A security vulnerability exists in versions of OpenLiteSpeed prior to 1.8.1 that stems from an inability to properly handle chunked encoding...
PT-2024-24157 · Unknown · Openlitespeed
Name of the Vulnerable Software and Affected Versions: OpenLiteSpeed versions prior to 1.8.1 Description: The issue is related to the mishandling of chunked encoding. Recommendations: For versions prior to 1.8.1, update to version 1.8.1 or later to resolve the issue...
CVE-2024-31617: Allocation of Resources Without Limits or Throttling
OpenLiteSpeed before 1.8.1 mishandles chunked encoding...
CVE-2023-40518
LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers...
CVE-2023-40518
LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers...
Design/Logic Flaw
LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers...
CVE-2023-40518: Undefined Security Weakness
LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers...
CVE-2023-40518
LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers...
CVE-2023-40518
LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers...
CVE-2023-40518
LiteSpeed OpenLiteSpeed
Litespeed Technologie OpenLiteSpeed Security Breach
Litespeed Technologie OpenLiteSpeed is an open source web server from Litespeed Technologie. A security vulnerability exists in LiteSpeed OpenLiteSpeed versions prior to 1.7.18, which stems from not strictly validating HTTP request headers...
CVE-2023-40518
LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers...
The vulnerability of LiteSpeed and OpenLiteSpeed web application server software lies in the use of an insecure search path, which allows attackers to escalate their privileges.
The vulnerability of LiteSpeed and OpenLiteSpeed web application server software lies in the use of an insecure search path. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
The vulnerability of the software for server-based web applications, LiteSpeed and OpenLiteSpeed, allows a perpetrator to execute arbitrary code.
The vulnerability of the LiteSpeed and OpenLiteSpeed web application server software relates to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Multiple High-Severity Flaws Affect Widely Used OpenLiteSpeed Web Server Software
Multiple high-severity flaws have been uncovered in the open source OpenLiteSpeed Web Server as well as its enterprise variant that could be weaponized to achieve remote code execution. "By chaining and exploiting the vulnerabilities, adversaries could compromise the web server and gain fully...
CVE-2022-0072
Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1...