7700 matches found
GHSA-F2GQ-P6QV-CCW4 Tomcat Vulnerable to Web Cache Poisoning
Jakarta Tomcat 5.0.19 Coyote/1.1 and Tomcat 4.1.24 Coyote/1.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat t...
SUSE: Security Advisory (SUSE-SU-2022:14941-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:14941-1 Security update for dnsmasq
This update for dnsmasq fixes the following issues: - CVE-2021-3448: Fixed a potential DNS cache poisoning issue due to a constant outgoing port being used when for certain use cases of the --server option bsc1183709. - CVE-2022-0934: Fixed an invalid memory access that could lead to remote denia...
SUSE-SU-2022:14940-1 Security update for dnsmasq
This update for dnsmasq fixes the following issues: - CVE-2021-3448: Fixed a potential DNS cache poisoning issue due to a constant outgoing port being used when for certain use cases of the --server option bsc1183709. - CVE-2022-0934: Fixed an invalid memory access that could lead to remote denia...
SUSE-SU-2022:1289-1 Security update for dnsmasq
This update for dnsmasq fixes the following issues: - CVE-2021-3448: Fixed a potential DNS cache poisoning issue due to a constant outgoing port being used when for certain use cases of the --server option bsc1183709. - CVE-2022-0934: Fixed an invalid memory access that could lead to remote denia...
SUSE-SU-2022:1288-1 Security update for dnsmasq
This update for dnsmasq fixes the following issues: - CVE-2021-3448: Fixed a potential DNS cache poisoning issue due to a constant outgoing port being used when for certain use cases of the --server option bsc1183709. - CVE-2022-0934: Fixed an invalid memory access that could lead to remote denia...
OESA-2022-1615 bind security update
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
Design/Logic Flaw
Discourse is an open source platform for community discussion. In affected versions an attacker can poison the cache for anonymous i.e. not logged in users, such that the users are shown the crawler view of the site instead of the HTML page. This can lead to a partial denial-of-service. This issu...
CVE-2022-24824 Anonymous user cache poisoning in discourse
Discourse is an open source platform for community discussion. In affected versions an attacker can poison the cache for anonymous i.e. not logged in users, such that the users are shown the crawler view of the site instead of the HTML page. This can lead to a partial denial-of-service. This issu...
CVE-2022-24824
CVE-2022-24824 affects the Discourse platform. An attacker can poison the cache for anonymous users, causing them to see the crawler view instead of the HTML page, resulting in a partial denial-of-service. Technical details in connected sources confirm the vulnerability is in the cache handling f...
CVE-2022-24824 Anonymous user cache poisoning in discourse
Discourse is an open source platform for community discussion. In affected versions an attacker can poison the cache for anonymous i.e. not logged in users, such that the users are shown the crawler view of the site instead of the HTML page. This can lead to a partial denial-of-service. This issu...
CVE-2022-24824 Anonymous user cache poisoning in discourse
Discourse is an open source platform for community discussion. In affected versions an attacker can poison the cache for anonymous i.e. not logged in users, such that the users are shown the crawler view of the site instead of the HTML page. This can lead to a partial denial-of-service. This issu...
PT-2022-16903 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to the latest stable, beta and tests-passed versions Description: The issue affects Discourse, an open source platform for community discussion. An attacker can poison the cache for anonymous users, causing them to se...
Fix of CVE: CVE-2021-25220
CVE-2021-25220: fix possible cache poisoning from forwarder responses...
CLSA-2022-1649331579 Fix of CVE: CVE-2021-25220
CVE-2021-25220: fix possible cache poisoning from forwarder responses...
CLSA-2022-1649331387 Fixed CVE-2021-25220 in bind
CVE-2021-25220: fix possible cache poisoning from forwarder responses...
CLSA-2022-1649172145 Fix of CVE: CVE-2021-25220
CVE-2021-25220: fix possible cache poisoning from forwarder responses...
CLSA-2022-1649172068 Fix of CVE: CVE-2021-25220
CVE-2021-25220: fix possible cache poisoning from forwarder responses...
CLSA-2022-1649170483 Fix CVE(s): CVE-2021-25220
SECURITY UPDATE: cache poisoning via bogus NS records - debian/patches/CVE-2021-25220.patch: tighten rules for acceptance of records into the cache in lib/dns/resolver.c. - CVE-2021-25220...
