Lucene search
K

15 matches found

OSV
OSV
added 2026/01/29 8:16 p.m.3 views

CVE-2025-63656

An out-of-bounds read in the headercmp function mkserver/mkhttpparser.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

7.5CVSS5.6AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/29 12:0 a.m.6 views

PT-2026-5342

Name of the Vulnerable Software and Affected Versions monkey commit f37e984 Description An out-of-bounds read exists in the header cmp function located in mk server/mk http parser.c. This issue allows attackers to cause a Denial of Service DoS by sending a crafted HTTP request to the server...

7.5CVSS5.4AI score0.01043EPSS
Exploits1References6
Cvelist
Cvelist
added 2026/01/29 12:0 a.m.30 views

CVE-2025-63656

An out-of-bounds read in the headercmp function mkserver/mkhttpparser.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

0.01043EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/01/29 12:0 a.m.5 views

CVE-2025-63656

An out-of-bounds read in the headercmp function mkserver/mkhttpparser.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

5.9AI score0.01043EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/01/29 12:0 a.m.2 views

CVE-2025-63656

An out-of-bounds read in the headercmp function mkserver/mkhttpparser.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

5.4AI score0.01043EPSS
Exploits1References2
CVE
CVE
added 2026/01/29 12:0 a.m.12 views

CVE-2025-63656

CVE-2025-63656 affects the Monkey server (commit f37e984) with an out-of-bounds read in the header_cmp function (mk_server/mk_http_parser.c). Exploitation is sufficient to cause a Denial of Service by receiving a crafted HTTP request. Connected sources (Red Hat advisory, NVD/NVL records, Attacker...

7.5CVSS5.9AI score0.01043EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/30 12:0 a.m.4 views

The vulnerability of Firefox browser, related to insufficient protection of service data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Firefox browsers is related to insufficient protection of service data during the processing of the Vary response header for comparing request headers. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by sending iterativ...

7.8CVSS6.2AI score0.00634EPSS
Exploits0References10Affected Software3
Tenable Nessus
Tenable Nessus
added 2023/06/09 12:0 a.m.33 views

Amazon Linux AMI : squid (ALAS-2023-1766)

The version of squid installed on the remote host is prior to 3.5.20-17.48. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1766 advisory. Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in...

7.5CVSS6.6AI score0.06846EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:13 a.m.3 views

SUSE CVE-2006-7250

The mimehdrcmp function in crypto/asn1/asnmime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted S/MIME message...

5CVSS8.1AI score0.07067EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 4:54 a.m.3 views

SUSE CVE-2016-10003

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients...

7.5CVSS8.4AI score0.04772EPSS
Exploits0References4
Kitploit
Kitploit
added 2020/08/20 9:30 p.m.66 views

Wonitor - Fast, Zero Config Web Endpoint Change Monitor

fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when monitoring...

7.1AI score
Exploits0References2
OSV
OSV
added 2017/01/27 5:59 p.m.4 views

ALPINE-CVE-2016-10003

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients...

7.5CVSS7.4AI score0.04772EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2017/01/27 5:0 p.m.25 views

CVE-2016-10003

Removed by vendor...

7.5CVSS6.3AI score0.04772EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2017/01/27 5:0 p.m.39 views

CVE-2016-10003

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients...

7.5CVSS7.7AI score0.04772EPSS
Exploits0
OSV
OSV
added 2017/01/27 12:0 a.m.0 views

UBUNTU-CVE-2016-10003

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients...

7.5CVSS6.7AI score0.04772EPSS
Exploits0References6
Rows per page
Query Builder