PT-2022-23884 · Mdaemon Technologies · Mdaemon Technologies Securitygateway For Email Servers

Name of the Vulnerable Software and Affected Versions: MDaemon Technologies SecurityGateway for Email Servers version 8.5.2 Description: The issue concerns HTTP Response splitting, which occurs via the format parameter. This allows for potential manipulation of HTTP responses. Recommendations: Fo...

PT-2022-23886 · Mdaemon Technologies · Mdaemon Technologies Securitygateway For Email Servers

Name of the Vulnerable Software and Affected Versions: MDaemon Technologies SecurityGateway for Email Servers version 8.5.2 Description: The issue concerns HTTP Response splitting, which occurs via the data parameter. This allows for potential manipulation of HTTP responses. Recommendations: For...

CVE-2022-37953: Improper Neutralization of CRLF Sequences in HTTP Headers

An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST...

Alt-N MDaemon 注入漏洞

Alt-N MDaemon is a mail service system from Alt-N Corporation that provides complete mail server functionality, protects users from spam, enables web login to send and receive emails, supports remote management, and protects the system against email viruses when used in conjunction with the MDaem...

Alt-N MDaemon 注入漏洞

Alt-N MDaemon is a mail service system from Alt-N Corporation that provides complete mail server functionality, protects users from spam, enables web login to send and receive emails, supports remote management, and protects the system against email viruses when used in conjunction with the MDaem...

CVE-2022-37242: Improper Neutralization of Special Elements in Output Used by a Downstream Component

MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter...

General Electric WorkstationST 安全漏洞

General Electric WorkstationST is an alarm viewer in a software suite from General Electric, USA. A security vulnerability exists in General Electric WorkstationST versions prior to 07.09.15 that stems from an HTTP response splitting vulnerability in the AM Gateway Challenge-Response dialog. An...

CVE-2022-37953

An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST...

PT-2022-4457 · Unknown · Workstation

Name of the Vulnerable Software and Affected Versions: WorkstationST versions prior to 07.09.15 Description: The issue is related to an HTTP response splitting vulnerability in the AM Gateway Challenge-Response dialog of WorkstationST. This vulnerability could allow a remote attacker to compromis...

HTTP Response Splitting

Overview SwiftNIOHTTP1 is a cross-platform asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Affected versions of this package are vulnerable to HTTP Response Splitting. This occurs when a HTTP/1.1 server...

HTTP Response Splitting

Overview apple/swift-nio is an event-driven network application framework for high performance protocol servers & clients, non-blocking. Affected versions of this package are vulnerable to HTTP Response Splitting. This occurs when a HTTP/1.1 server accepts user generated input from an incoming...

Security Bulletin: A security vulnerability has been identified in WebSphere Liberty Profile shipped with IBM License Metric Tool v9 and IBM BigFix Inventory v9 (CVE-2015-2017)

Summary WebSphere Liberty Profile is shipped as a component of IBM License Metric Tool v9 and IBM BigFix Inventory v9. Information about a security vulnerability affecting WebSphere Liberty Profile has been published in a security bulletin. Vulnerability Details CVEID: CVE-2015-2017 DESCRIPTION:...

Security Bulletin: A security vulnerabilities has been identified in WebSphere Liberty Profile shipped with IBM License Metric Tool v9 and IBM BigFix Inventory v9

Summary There are multiple vulnerabilities in WebSphere Liberty Profile that is used in IBM License Metric Tool v9 and IBM BigFix Inventory v9 Vulnerability Details CVEID:CVE-2016-0359 DESCRIPTION: IBM WebSphere Application Server is vulnerable to HTTP response splitting attacks. A remote attacke...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server that is shipped with IBM Intelligent Operations Center and related products (CVE-2016-0359)

Summary IBM WebSphere Application Server v7.0 is shipped as a component of IBM Intelligent Operations Center. Information about a security vulnerability affecting IBM WebSphere Application Server has been identified and published in a security bulletin. Vulnerability Details Consult the security...

CVE-2021-40336

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...

CVE-2021-40336

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...

Design/Logic Flaw

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...

CVE-2021-40336 HTTP Response Splitting in Hitachi Energy’s MSM Product

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...

CVE-2021-40336

Hitachi Energy MSM (versions 2.2 and prior) is affected by CVE-2021-40336 due to improper validation of data in HTTP headers, enabling HTTP response splitting and potential in-browser code execution to steal session cookies. ED docs indicate a remediation path: update to a fixed MSM version, and ...

CVE-2021-40336: Improper Neutralization of CRLF Sequences in HTTP Headers

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...