CVE-2021-33254

An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a denial of service via the stream paramter to the parseUri function...

CVE-2021-33254

An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a denial of service via the stream paramter to the parseUri function...

CVE-2021-33254: NULL Pointer Dereference

An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a denial of service via the stream paramter to the parseUri function...

PT-2022-10223

Name of the Vulnerable Software and Affected Versions Appweb Community Edition version 8.2.1 Description An issue was discovered in the src/http/httpLib.c file, allowing attackers to cause a denial of service via the stream parameter to the parseUri function. Recommendations For Appweb Community...

Palo Alto Networks PAN-OS Misconfiguration Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. A misconfiguration vulnerability exists in Palo Alto Networks PAN-OS. The vulnerability stems from an unreasonable file configuration, parameter configuration, etc. during the use of a...

Palo Alto Networks PAN-OS 8.0.x / 8.1.x < 8.1.16 DoS

The version of Palo Alto Networks PAN-OS running on the remote host is 8.0.x or 8.1.x prior to 8.1.16. It is, therefore, affected by a denial of service DoS vulnerability. An insecure configuration of the appweb daemon allows a remote, unauthenticated user to send a specifically crafted request t...

CVE-2020-2041

An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to send a specifically crafted request to the device that causes the appweb service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS...

CVE-2020-2041

An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to send a specifically crafted request to the device that causes the appweb service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS...

Cross site request forgery (csrf)

An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to send a specifically crafted request to the device that causes the appweb service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS...

CVE-2020-2041

CVE-2020-2041 describes a denial-of-service condition in Palo Alto Networks PAN-OS caused by an insecure configuration of the appweb daemon . The vulnerability allows a remote, unauthenticated actor to send a crafted request that crashes the appweb service, leading to a restart of PAN-OS services...

PAN-OS: Management web interface denial-of-service (DoS)

An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to send a specifically crafted request to the device that causes the appweb service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS...

PT-2020-15265

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 8.0 through 8.1.15 Description The issue is caused by an insecure configuration of the appweb daemon, allowing a remote unauthenticated user to send a specifically crafted request to the device, causing the...

CVE-2020-2041: Undefined Security Weakness

An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to send a specifically crafted request to the device that causes the appweb service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS...

Appweb Null Pointer Dereference Vulnerability

Appweb is a web server for embedded applications. Appweb suffers from a null pointer dereference vulnerability. The vulnerability stems from the fact that Appweb, which supports CGI, does not properly handle HTTP requests with a Range header that lacks an exact range. An attacker could exploit th...

CVE-2020-15689

Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header that lacks an exact range. This may result in a NULL pointer dereference and cause a denial of service...

CVE-2020-15689

Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header that lacks an exact range. This may result in a NULL pointer dereference and cause a denial of service...

Null pointer dereference

Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header that lacks an exact range. This may result in a NULL pointer dereference and cause a denial of service...

CVE-2020-15689

CVE-2020-15689 affects Appweb prior to 7.2.2 and 8.x prior to 8.1.0 when built with CGI support. A crafted HTTP Range header lacking an exact range can cause a NULL pointer dereference, leading to a denial of service. Impact is described as a crash/DoS without additional exploitation details in t...

CVE-2020-15689

Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header that lacks an exact range. This may result in a NULL pointer dereference and cause a denial of service...

CVE-2020-15689: NULL Pointer Dereference

Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header that lacks an exact range. This may result in a NULL pointer dereference and cause a denial of service...