Lucene search
K

14 matches found

OSV
OSV
added 2026/01/29 8:16 p.m.1 views

CVE-2025-63656

An out-of-bounds read in the headercmp function mkserver/mkhttpparser.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

7.5CVSS5.6AI score
Exploits0References2
Cvelist
Cvelist
added 2026/01/29 12:0 a.m.28 views

CVE-2025-63656

An out-of-bounds read in the headercmp function mkserver/mkhttpparser.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

0.01314EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/01/29 12:0 a.m.1 views

CVE-2025-63656

An out-of-bounds read in the headercmp function mkserver/mkhttpparser.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

5.4AI score0.01314EPSS
Exploits1References2
CVE
CVE
added 2026/01/29 12:0 a.m.7 views

CVE-2025-63656

CVE-2025-63656 affects the Monkey server (commit f37e984) with an out-of-bounds read in the header_cmp function (mk_server/mk_http_parser.c). Exploitation is sufficient to cause a Denial of Service by receiving a crafted HTTP request. Connected sources (Red Hat advisory, NVD/NVL records, Attacker...

7.5CVSS5.9AI score0.01314EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/29 12:0 a.m.3 views

PT-2026-5342

Name of the Vulnerable Software and Affected Versions monkey commit f37e984 Description An out-of-bounds read exists in the header cmp function located in mk server/mk http parser.c. This issue allows attackers to cause a Denial of Service DoS by sending a crafted HTTP request to the server...

7.5CVSS5.4AI score0.01314EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2026/01/29 12:0 a.m.2 views

CVE-2025-63656

An out-of-bounds read in the headercmp function mkserver/mkhttpparser.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

5.9AI score0.01314EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2023/06/09 12:0 a.m.32 views

Amazon Linux AMI : squid (ALAS-2023-1766)

The version of squid installed on the remote host is prior to 3.5.20-17.48. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1766 advisory. Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in...

7.5CVSS6.6AI score0.00962EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:13 a.m.1 views

SUSE CVE-2006-7250

The mimehdrcmp function in crypto/asn1/asnmime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted S/MIME message...

5CVSS8.1AI score0.01998EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 4:54 a.m.1 views

SUSE CVE-2016-10003

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients...

7.5CVSS8.4AI score0.00962EPSS
Exploits0References4
Kitploit
Kitploit
added 2020/08/20 9:30 p.m.65 views

Wonitor - Fast, Zero Config Web Endpoint Change Monitor

fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when monitoring...

7.1AI score
Exploits0References2
OSV
OSV
added 2017/01/27 5:59 p.m.1 views

ALPINE-CVE-2016-10003

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients...

7.5CVSS7.4AI score0.00962EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2017/01/27 5:0 p.m.36 views

CVE-2016-10003

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients...

7.5CVSS7.7AI score0.00962EPSS
Exploits0
Debian CVE
Debian CVE
added 2017/01/27 5:0 p.m.23 views

CVE-2016-10003

Removed by vendor...

7.5CVSS6.3AI score0.00962EPSS
Exploits0
OSV
OSV
added 2017/01/27 12:0 a.m.0 views

UBUNTU-CVE-2016-10003

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients...

7.5CVSS6.7AI score0.00962EPSS
Exploits0References6
Rows per page
Query Builder