CVE-2016-8743: Undefined Security Weakness

Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-en...

MGASA-2017-0204 Updated nodejs packages fix security vulnerability

Node.js has a defect that may make HTTP response splitting possible under certain circumstances. If user-input is passed to the reason argument to writeHead on an HTTP response, a new-line character may be used to inject additional responses CVE-2016-5325. The tls.checkServerIdentity function in...

Updated nodejs packages fix security vulnerability

Node.js has a defect that may make HTTP response splitting possible under certain circumstances. If user-input is passed to the reason argument to writeHead on an HTTP response, a new-line character may be used to inject additional responses CVE-2016-5325. The tls.checkServerIdentity function in...

ntopng HTTP Response Splitting Vulnerability

NTOPNG is the next generation version of NTOP, computer software for monitoring traffic on a computer network. A split vulnerability exists in the ntopng HTTP response, which can be exploited by an attacker to have an impact on the integrity of the data...

Design/Logic Flaw

ntopng before 3.0 allows HTTP Response Splitting...

CVE-2017-7459

ntopng before 3.0 allows HTTP Response Splitting...

CVE-2017-7459

ntopng before 3.0 allows HTTP Response Splitting...

CVE-2017-7459

ntopng before 3.0 allows HTTP Response Splitting...

CVE-2017-7459

ntopng before 3.0 allows HTTP Response Splitting...

CVE-2017-7459

ntopng before 3.0 is vulnerable to HTTP Response Splitting in HTTP responses. The CVE-2017-7459 entry documents this issue with a high impact (CVSS3 base 7.5) affecting network attack vector and high integrity impact. Exploitation details are not provided in the supplied sources. Remediation: upg...

CVE-2017-7459

Removed by vendor...

CVE-2017-7459

ntopng before 3.0 allows HTTP Response Splitting...

CVE-2017-7459: Improper Neutralization of Special Elements in Output Used by a Downstream Component

ntopng before 3.0 allows HTTP Response Splitting...

PT-2017-17752

Name of the Vulnerable Software and Affected Versions ntopng versions prior to 3.0 Description The issue allows HTTP Response Splitting. Recommendations For versions prior to 3.0, update to version 3.0 or later to resolve the issue...

IBM Maximo Asset Management HTTP Response Splitting Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. An HTTP respons...

OpenVPN Access Server 2.1.4 CRLF Injection

OpenVPN Access Server : CRLF injection with Session fixation Description OpenVPN Access Server is a full featured secure network tunneling VPN software solution that integrates OpenVPN server capabilities, enterprise management capabilities, simplified OpenVPN Connect UI, and OpenVPN Client...

OpenVPN Access Server : CRLF injection with Session fixation(CVE-2017-5868)

Description OpenVPN Access Server is a full featured secure network tunneling VPN software solution that integrates OpenVPN server capabilities, enterprise management capabilities, simplified OpenVPN Connect UI, and OpenVPN Client software packages that accommodate Windows, MAC, Linux, Android, a...

CVE-2017-1291

IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attack...

Cross site scripting

IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attack...

CVE-2017-1291

IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attack...