Font Component DoS

The vulnerability of the Font component in Google Chrome and Microsoft Edge relates to errors in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

nghttp2 Component Data Compromise

The vulnerability of the nghttpx component in the nghttp2 library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Kong Gateway Enterprise 环境问题漏洞

Kong Gateway Enterprise is an enterprise-level API gateway platform developed by Kong Corporation. Versions 3.4, 3.10, 3.11, 3.12, 3.13, and 3.14 of Kong Gateway Enterprise contain environmental issues vulnerabilities. These vulnerabilities stem from defects in the HTTP request processing pipelin...

ASGI Request Header Handler Bypass

The vulnerability of the Request Header Handler component in the Starlette framework for web development is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

IBM OpenPages Cache Poisoning

The vulnerability of IBM OpenPages, a risk management platform for enterprises, is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to perform a cache poisoning attack or intercept sessions by sending specially crafted HTTP requests remote...

Node.js Permission Model Security Bypass

The vulnerability of the Node.js software platform’s permission model is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and send unauthorized requests...

Craft CMS Response Header Handler Code Execution

The vulnerability of the Response Header Handler component in the Craft CMS content management system is related to errors in HTTP request processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Go net/http Code Execution

The vulnerability of the net/http package in the Go programming language is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

TRENDnet TEW-410APB 安全漏洞

The TRENDnet TEW-410APB is a wireless access point from Trendnet, Inc. A security vulnerability exists in TRENDnet TEW-410APB version 1.3.06b, which stems from a null pointer dereference issue in the HTTP request processing component...

Keycloak Proxy Header Handler DoS

The vulnerability of the Proxy Header Handler component of the Keycloak identity and access management software is related to shortcomings in HTTP request processing. Exploiting this vulnerability could allow a attacker to cause service failures...

Cisco Small Business RV042 Router Code Execution

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...

D-Link DIR-3040 安全漏洞

The D-Link DIR-3040 is a router from China-based AUO D-Link. It provides the function of connecting to the network. A security vulnerability exists in the D-Link DIR-3040 that stems from a HTTP request processing reference heap-based buffer overflow remote code execution vulnerability...

D-Link DIR-3040 安全漏洞

The D-Link DIR-3040 is a router from China-based AUO D-Link. It provides the function of connecting to the network. A security vulnerability exists in the D-Link DIR-3040 that stems from a HTTP request processing reference stack based buffer overflow remote code execution vulnerability...

HAProxy HTTP Request Processing

The vulnerability of the server software HAProxy is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise data integrity from a remote location...

Node.js HTTP Request Hijacking

The vulnerability of the Node.js software platform is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to carry out an “HTTP request hijacking” attack...

SAP Web Dispatcher DoS

The vulnerability of SAP Web Dispatcher is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Mozilla Firefox Thunderbird HTTP Request Processing JavaScript Execution

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures, bypass security restrictions, access confidential information, or execute...

Python Waitress HTTP Request Processing Data Compromise

The vulnerability of the Python-based Waitress server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

SAP NetWeaver HTTP Request Processing Code Injection

The vulnerability of the execute function in SAP software, specifically SAP ContentServer, and the software of SAP NetWeaver – the Content Server and the SAP Web Dispatcher – are related to HTTP request processing vulnerabilities. Exploiting these vulnerabilities allows a malicious actor to injec...

cPython HTTP Request Processing

The vulnerability of the cPython programming language in Python is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to compromise data integrity or cause service failures...