1101 matches found
llhttp: HTTP Request Smuggling due to spaces in headers
An HTTP Request Smuggling HRS vulnerability was found in the llhttp library, used by Node.JS. Spaces as part of the header names were accepted as valid. In situations where HTTP conversations are being proxied such as proxy, reverse-proxy, load-balancer, an attacker can use this flaw to inject...
CVE-2021-43235
Storage Spaces Controller Information Disclosure Vulnerability...
CVE-2021-43235
Storage Spaces Controller Information Disclosure Vulnerability...
CVE-2021-43235
Storage Spaces Controller Information Disclosure Vulnerability...
CVE-2021-43227
Storage Spaces Controller Information Disclosure Vulnerability...
CVE-2021-43227
Storage Spaces Controller Information Disclosure Vulnerability...
CVE-2021-43227
Storage Spaces Controller Information Disclosure Vulnerability...
Information disclosure
Storage Spaces Controller Information Disclosure Vulnerability...
Information disclosure
Storage Spaces Controller Information Disclosure Vulnerability...
CVE-2021-43235
Technical details for CVE-2021-43235 are not publicly available in the provided documents. Monitor for updates from official sources; currently only CVSS metrics and references are noted.
CVE-2021-43235 Storage Spaces Controller Information Disclosure Vulnerability
...
CVE-2021-43227 Storage Spaces Controller Information Disclosure Vulnerability
...
CVE-2021-43227
CVE-2021-43227 is described as a Storage Spaces Controller Information Disclosure Vulnerability. The connected sources provide CVSS data: CVSS v3.1 vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N with a base score of 5.5 (MEDIUM) and a LOCAL attack vector with LOW complexity, requiring LOW pr...
CVE-2021-43227 Storage Spaces Controller Information Disclosure Vulnerability
...
Buffer overflow
The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...
CVE-2021-44538
The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...
CVE-2021-44538
The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...
Denial Of Service (DoS)
riot-web:edge is vulnerable to denial of service. Attackers sending a malicious sequence of messages can manipulate the state of the receiver's session in such a way that, for some buffer sizes, a buffer overflow happens on a call to olmsessiondescribe. Furthermore, safe buffer sizes were...
