Lucene search
+L

13893 matches found

NVD
NVD
added 2022/06/27 9:15 p.m.21 views

CVE-2022-31081

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS0.02264EPSS
SaveExploits1References11
UbuntuCve
UbuntuCve
added 2022/06/27 9:15 p.m.42 views

CVE-2022-31081

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS6.7AI score0.02264EPSS
SaveExploits1References8
Prion
Prion
added 2022/06/27 9:15 p.m.22 views

Design/Logic Flaw

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

6.4CVSS6.5AI score0.02264EPSS
SaveExploits1References11Affected Software1
OSV
OSV
added 2022/06/27 9:15 p.m.7 views

UBUNTU-CVE-2022-31081

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS6.6AI score0.02264EPSS
SaveExploits1References9
OSV
OSV
added 2022/06/27 12:00 a.m.26 views

CVE-2022-31081 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS6.4AI score
SaveExploits0References13
Debian CVE
Debian CVE
added 2022/06/27 12:00 a.m.67 views

CVE-2022-31081

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS6.9AI score0.02264EPSS
SaveExploits1
CNNVD
CNNVD
added 2022/06/27 12:00 a.m.10 views

HTTP::Daemon 环境问题漏洞

HTTP::Daemon is a simple HTTP class. An environmental issue vulnerability exists in HTTP::Daemon versions prior to 6.15. An attacker could exploit this vulnerability to gain privileged access to the API or poison the intermediate cache...

7.3CVSS6.5AI score0.02264EPSS
SaveExploits1References19
Cvelist
Cvelist
added 2022/06/27 12:00 a.m.38 views

CVE-2022-31081 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS7AI score0.02264EPSS
SaveExploits1References11
Vulnrichment
Vulnrichment
added 2022/06/27 12:00 a.m.2 views

CVE-2022-31081 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS7.4AI score0.02264EPSS
SaveExploits1References11
CVE
CVE
added 2022/06/27 12:00 a.m.651 views

CVE-2022-31081

CVE-2022-31081 affects the Perl HTTP::Daemon library. Versions prior to 6.15 are vulnerable due to improper handling of the Content-Length header, which could enable HTTP request smuggling and potentially allow privileged access to APIs or poisoning of intermediate caches. The issue is documented...

7.3CVSS6.7AI score0.02264EPSS
SaveExploits1References11Affected Software1
Positive Technologies
Positive Technologies
added 2022/06/27 12:00 a.m.14 views

PT-2022-4815 · Nginx +8 · Nginx +8

Name of the Vulnerable Software and Affected Versions: HTTP::Daemon versions prior to 6.15 Description: The issue is related to inconsistent interpretation of HTTP requests when handling Content-Length values, potentially allowing a remote attacker to gain privileged access to APIs or poison...

7.5CVSS9.2AI score0.02264EPSS
SaveExploits1References52
OSV
OSV
added 2022/06/24 11:04 a.m.7 views

OESA-2022-1722 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in the libvirt nwfilter driver. The...

4.3CVSS6.7AI score0.01049EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/21 2:57 p.m.7 views

USN-5489-1 qemu vulnerabilities

Alexander Bulekov discovered that QEMU incorrectly handled floppy disk emulation. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly leak sensitive information. CVE-2021-3507 It was discovered that QEMU incorrectly...

8.2CVSS6.9AI score0.02743EPSS
SaveExploits5References8
Ubuntu
Ubuntu
added 2022/06/21 2:57 p.m.140 views

USN-5489-1: QEMU vulnerabilities

Alexander Bulekov discovered that QEMU incorrectly handled floppy disk emulation. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly leak sensitive information. CVE-2021-3507 It was discovered that QEMU incorrectly...

8.2CVSS7.5AI score0.02743EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2022/06/20 12:00 a.m.1305 views

Nexans FTTO GigaSwitch Outdated Components / Hardcoded Backdoor

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Hardcoded Backdoor User and Outdated Software Components product: Nexans FTTO GigaSwitch industrial/office switches HW version 5 vulnerable version: See "Vulnerable /...

10CVSS0.2AI score0.94859EPSS
SaveExploits52
OSV
OSV
added 2022/06/16 4:15 p.m.3 views

DEBIAN-CVE-2022-31291

An issue in dltconfigfileparser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets...

7.5CVSS7AI score0.01014EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/16 4:15 p.m.27 views

CVE-2022-31291

An issue in dltconfigfileparser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets...

7.5CVSS0.01014EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/16 4:15 p.m.6 views

CVE-2022-31291

An issue in dltconfigfileparser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets...

7.5CVSS7.1AI score0.01014EPSS
SaveExploits0References3
Prion
Prion
added 2022/06/16 4:15 p.m.22 views

Double free

An issue in dltconfigfileparser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets...

5CVSS7.4AI score0.01014EPSS
SaveExploits0References2Affected Software2
UbuntuCve
UbuntuCve
added 2022/06/16 4:15 p.m.33 views

CVE-2022-31291

An issue in dltconfigfileparser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets...

7.5CVSS7.1AI score0.01014EPSS
SaveExploits0References4
Rows per page
Query Builder