CVE-2024-8175 CODESYS: web server vulnerable to DoS

An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS...

CVE-2024-8175 CODESYS: web server vulnerable to DoS

An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS...

Ada Web Server 安全漏洞

Ada Web Server AWS is an AdaCore open source complete framework for developing web-based applications in Ada. A security vulnerability exists in Ada Web Server version 20.0, which stems from a vulnerability that allows an attacker to elevate privileges and steal sessions via the RandomString...

CVE-2024-8175: Improper Check for Unusual or Exceptional Conditions

An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS...

httpd: HTTP response splitting

A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers, resulting in an HTTP response splitting...

ABB Cylon Aspect 3.08.01 Arbitrary File Deletion

ABB Cylon Aspect 3.08.01 databaseFileDelete.php Arbitrary File Delete Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.01 Summary: ASPECT is an award-winning scalable building energy...

PT-2024-6449 · 3S Smart Software Solutions · Codesys Control

Name of the Vulnerable Software and Affected Versions: CODESYS Control affected versions not specified Description: The issue is related to insufficient checking of unusual or exceptional states in the CODESYS web server, which can be exploited by a remote attacker to cause a denial of service Do...

RHSA-2021:2561 Red Hat Security Advisory: Red Hat JBoss Web Server 5.5.0 Security release

Bulletin has no description...

RHSA-2016:2807 Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.2 security update for Tomcat 7

Bulletin has no description...

HTTP Request Smuggling in ruby webrick

An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfer-Encoding header, e.g., "GET /admin HTTP/1.1\r\n" inside of a "POST /user HTTP/1.1\r\n" request. NOTE: the supplier''s position is "Webri...

MacTaggart Scott: Overwrite any file of the web server

The web server was vulnerable to file overwrite due to a vulnerable module used to generate files. An attacker could have overwritten any file on the web server, including critical system files, by sending a specially crafted request...

RHSA-2024:1318 Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.8 release and security update

Bulletin has no description...

RHSA-2024:1324 Red Hat Security Advisory: Red Hat JBoss Web Server 6.0.1 release and security update

Bulletin has no description...

RHSA-2023:6206 Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.6 release and security update

Bulletin has no description...

RHSA-2023:4909 Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.4 release and security update

Bulletin has no description...

RHSA-2018:2701 Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 Service Pack 5 security and bug fix update

Bulletin has no description...

RHSA-2017:1801 Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 Service Pack 1 security update

Bulletin has no description...

RHEA-2018:2189 Red Hat Enhancement Advisory: Red Hat JBoss Web Server 5.0.0 enhancement update

Bulletin has no description...

RHEA-2018:2188 Red Hat Enhancement Advisory: Red Hat JBoss Web Server 5.0.0 enhancement update

Bulletin has no description...

CVE-2024-45614

Puma is a Ruby/Rack web server built for parallelism. In affected versions clients could clobber values set by intermediate proxies such as X-Forwarded-For by providing a underscore version of the same header X-ForwardedFor. Any users relying on proxy set variables is affected. v6.4.3/v5.6.9 now...