4901 matches found
The vulnerability of the Envoy proxy server, related to errors in processing mixed-case schemes in HTTP/2, allows attackers to gain access to protected data.
The vulnerability of the Envoy proxy server is related to errors in the processing of mixed-case schemes in HTTP/2. Exploiting this vulnerability can allow a remote attacker to gain access to protected data...
[SECURITY] [DLA 3509-1] libmail-dkim-perl update
Debian LTS Advisory DLA-3509-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 27, 2023 https://wiki.debian.org/LTS Package : libmail-dkim-perl Version : 0.54-1+deb10u1 Debian Bug : 1039489 It was discovered that the domain check in libmail-dkim-perl, a Perl...
Authentication Bypass
github.com/envoyproxy/envoy is vulnerable to Authentication Bypass. The library supports mixed-case schemes for HTTP/2; however, internal checks that are case-sensitive may result in rejections or bypasses in unencrypted connections, possibly harming htTp and htTps requests...
CVE-2023-35944
A flaw was found in Envoy that allows for mixed-case schemes in HTTP/2. However, some internal scheme checks in Envoy are case-sensitive, leading to incorrect handling of requests and responses with mixed case schemes. For example, if a request with a mixed scheme HTTP is sent to the OAuth2 filte...
Design/Logic Flaw
Envoy is an open source edge and service proxy designed for cloud-native applications. Envoy allows mixed-case schemes in HTTP/2, however, some internal scheme checks are case-sensitive. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, this can lead to the rejection of requests wit...
CVE-2023-35944 Envoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes
Envoy is an open source edge and service proxy designed for cloud-native applications. Envoy allows mixed-case schemes in HTTP/2, however, some internal scheme checks are case-sensitive. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, this can lead to the rejection of requests wit...
CVE-2023-35944 Envoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes
Envoy is an open source edge and service proxy designed for cloud-native applications. Envoy allows mixed-case schemes in HTTP/2, however, some internal scheme checks are case-sensitive. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, this can lead to the rejection of requests wit...
PT-2023-3901 · Envoy · Envoy
Name of the Vulnerable Software and Affected Versions: Envoy versions prior to 1.27.0 Envoy versions prior to 1.26.4 Envoy versions prior to 1.25.9 Envoy versions prior to 1.24.10 Envoy versions prior to 1.23.12 Description: The issue is related to the handling of mixed-case schemes in HTTP/2 by...
Envoy 环境问题漏洞
Envoy is an open source distributed proxy server. Envoy suffers from an environmental issue vulnerability that stems from the ability to bypass certain requests, which could result in requests using a mixed-case scheme being denied...
CVE-2023-31216
creationtimestamp| type| source ---|---|--- 2023-07-17 18:40:23+00:00| seen| https://t.me/cibsecurity/66825...
CVE-2023-29414
creationtimestamp| type| source ---|---|--- 2023-07-12 12:48:34+00:00| seen| https://t.me/cibsecurity/66509...
uint128 changeAmount might overflow
Lines of code Vulnerability details Impact This issue is an edge case, that uint128 changeAmount could overflow, making the protocol fail for certain amount of swap. Proof of Concept Let's break down the changeAmount: 1. amountOut/amountIn 2. BASE27 3. normalizer File:...
DENIAL OF SERVICE (DoS) WHEN DECREASING THE weight DUE TO UNDERFLOW IN THE UlyssesPool.setWeight FUNCTION
Lines of code Vulnerability details Impact The UlyssesPool.setWeight function is used to update the weight of a particular poolId in the current UlyssesPool. But when the weight of the respective poolId is decreased from the current value, the calculation underflows and thus DoS the reducing of...
CVE-2023-36608
creationtimestamp| type| source ---|---|--- 2023-07-04 22:59:44+00:00| seen| https://t.me/cibsecurity/65883...
CVE-2023-36377
creationtimestamp| type| source ---|---|--- 2023-07-04 00:22:45+00:00| seen| https://t.me/cibsecurity/65878 2025-12-30 14:45:41+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mb7loldne22b...
OESA-2023-1387 qt5-qtbase security update
Qt is a software toolkit for developing applications. Security Fixes: An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security HSTS header, allowing unencrypted connections to be established,...
CVE-2023-3357
creationtimestamp| type| source ---|---|--- 2023-06-29 02:13:20+00:00| seen| https://t.me/cibsecurity/65705 2025-03-11 04:41:13+00:00| seen| Telegram/UAZQfvnJyYxoHYqS95w6Cap5-3O-uUFOYvAe3SnFs8e3ak...
Veeam Cloud Service Provider Case Administrator FAQ
Intended Audience This article contains information that is relevant to Veeam Cloud Service Providers. If you are not a Veeam Cloud Service Provider, please review the following: KB2211: My Account Portal - Role Management FAQ Case Administrator Assignment Restrictions Attempting to assign a case...
PT-2023-5557 · Eclipse +3 · Eclipse Jgit +3
Name of the Vulnerable Software and Affected Versions: Eclipse JGit versions prior to 6.6.1.202309021850-r Eclipse JGit versions prior to 6.7.0.202309050840-r Eclipse JGit versions 5.13.3 prior to 5.13.3.202401111512-r Description: The issue is related to the handling of symbolic links in Eclipse...
