CVE-2023-41104

libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the exact attack surface will depend on the particular VCL Varnish Configuration...

Authentication flaw

libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the exact attack surface will depend on the particular VCL Varnish Configuration...

CVE-2023-41104

Affected software: libvmod-digest (pre-1.0.3) used with Varnish Enterprise 6.0.x up to 6.0.11r5. Issue: out-of-bounds memory access during base64 decoding in libvmod-digest can cause authentication bypass and information disclosure; exact attack surface depends on the VCL configuration. Impact: a...

Updated varnish packages fix a security vulnerability

Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Varnish Enterprise 6.0.x before 6.0.8r3, and Varnish Cache 5.x and 6.x before 6.5.2, 6.6.x before 6.6.1, and 6.0 LTS before 6.0.8...

CVE-2014-8303

CVE-2014-8303 is a documented cross-site scripting (XSS) vulnerability in Splunk Web for Splunk Enterprise 6.1.x before 6.1.4 and 6.0.x before 6.0.6. The issue allows a remote attacker to inject arbitrary web script or HTML via vectors related to event parsing. The NVD entry provides a base score...

Sun Java Directory Server Information Disclosure Vulnerability - Windows

Sun Java Directory Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java Directory Server Information Disclosure Vulnerability (Windows)

This host is running Sun Java Directory Server and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpodsunjavadirserverinfodiscvulnwin.nasl 5122 2017-01-27 12:16:00Z teissa $ Sun Java Directory Server Information Disclosure Vulnerability Windows Authors: Sujit...