amphp/http Host Header Injection vulnerability

amphp/http versions before 1.0.1 allows an attacker to supply invalid input in the Host header which may lead to various type of Host header injection attacks...

CVE-2024-2248

A Header Injection vulnerability in the JFrog platform in versions below 7.85.0 SaaS and 7.84.7 Self-Hosted may allow threat actors to take over the end user's account when clicking on a specially crafted URL sent to the victim’s user email...

CVE-2024-2248 JFrog Artifactory Header Injection

A Header Injection vulnerability in the JFrog platform in versions below 7.85.0 SaaS and 7.84.7 Self-Hosted may allow threat actors to take over the end user's account when clicking on a specially crafted URL sent to the victim’s user email...

CVE-2024-2248 JFrog Artifactory Header Injection

A Header Injection vulnerability in the JFrog platform in versions below 7.85.0 SaaS and 7.84.7 Self-Hosted may allow threat actors to take over the end user's account when clicking on a specially crafted URL sent to the victim’s user email...

CVE-2024-2248

CVE-2024-2248 is a header injection vulnerability in JFrog Platform affecting versions below 7.85.0 (SaaS) and 7.84.7 (Self-Hosted). The issue could let an attacker take over a user’s account when a victim clicks a specially crafted URL sent to their email. The CVSS v3.1 base score is 6.4 (Medium...

PT-2024-40258 · Monolog · Monolog

Name of the Vulnerable Software and Affected Versions: Monolog library affected versions not specified Description: A header injection issue has been identified in the NativeMailerHandler of the Monolog library, potentially allowing an attacker to manipulate email headers when log messages are se...

PT-2024-19445 · Jfrog · Jfrog Platform

Name of the Vulnerable Software and Affected Versions: JFrog platform versions prior to 7.85.0 SaaS JFrog platform versions prior to 7.84.7 Self-Hosted Description: A Header Injection issue may allow threat actors to take over the end user's account when clicking on a specially crafted URL sent t...

amphp/http Host Header Injection vulnerability

amphp/http versions before 1.0.1 allows an attacker to supply invalid input in the Host header which may lead to various type of Host header injection attacks...

golang: net/http: insufficient sanitization of Host header

A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...

Hanwha Vision NVR和DVR 安全漏洞

Hanwha Vision NVR and Hanwha Vision DVR are both products of Hanwha Vision, a South Korean company.Hanwha Vision NVR is a series of network video recorder devices.Hanwha Vision DVR is a series of digital video recorder devices. Hanwha Vision NVRs and DVRs are vulnerable to a security flaw that...

OESA-2024-1477 apache-mime4j security update

Java stream based MIME message parser. Security Fixes: Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages. CVE-2024-21742...

OESA-2024-1478 apache-mime4j security update

Java stream based MIME message parser. Security Fixes: Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages. CVE-2024-21742...

OESA-2024-1479 apache-mime4j security update

Java stream based MIME message parser. Security Fixes: Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages. CVE-2024-21742...

OESA-2024-1475 apache-mime4j security update

Java stream based MIME message parser. Security Fixes: Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages. CVE-2024-21742...

OESA-2024-1476 apache-mime4j security update

Java stream based MIME message parser. Security Fixes: Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages. CVE-2024-21742...

WordPress WP Customer Reviews plugin < 3.7.1 - Malicious Redirect via HTTP-EQUIV Injection vulnerability

Malicious Redirect via HTTP-EQUIV Injection vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin WP Customer Reviews versions 3.7.1...

Header Injection

undici is vulnerable to Header Injection. The vulnerability is due to inconsistent header handling, where headers were cleared for fetch but not for undici.request, which could result in unauthorized access to sensitive information...

DEBIAN-CVE-2024-24795

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

AZL-39997 CVE-2024-24795 affecting package httpd for versions less than 2.4.61-1

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

ALPINE-CVE-2024-24795

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...