6031 matches found
PT-2017-11845
Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.1, 7.5, and 7.6 Description The issue allows a local attacker to obtain sensitive information using HTTP Header Injection. Recommendations For versions 7.1, 7.5, and 7.6, update to a version that includes...
CVE-2017-1124: Exposure of Sensitive Information to an Unauthorized Actor
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection. IBM Reference : 1998053...
UBUNTU-CVE-2017-5615
cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location...
CVE-2017-5615
cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location...
CVE-2017-5615: URL Redirection to Untrusted Site
cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location...
PT-2017-16619
Name of the Vulnerable Software and Affected Versions cgiemail and cgiecho affected versions not specified Description The issue allows remote attackers to inject HTTP headers via a newline character in the redirect location. Recommendations At the moment, there is no information about a newer...
Multiple I-O DATA network camera products vulnerable to HTTP header injection
Overview Multiple network camera products provided by I-O DATA DEVICE, INC. contain a HTTP header injection vulnerability. Takayoshi Isayama of Mitsui Bussan Secure Directions, Inc. reported respective vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Ear...
JVN#46830433: Multiple I-O DATA network camera products multiple vulnerabilities
Multiple network camera products provided by I-O DATA DEVICE, INC. contain multiple vulnerabilities listed below. HTTP header injection CWE-113 - CVE-2017-2111 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N| Base Score: 4.7 CVSS v2|...
Local Information Disclosure Vulnerability in Multiple IBM Products
IBM is a global information technology and business solutions company.IBM Maximo Asset Management is an asset management lifecycle and workflow process management system. A local information disclosure vulnerability exists in several IBM products. These include IBM Maximo Asset Management, a...
Semcms V2.1 header header injection vulnerability in frontend
SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers.SemCms using php and vb language writing, combined with apache or iis running. Semcms foreign trade web content...
cgiemail and cgiecho HTTP Header Injection Vulnerabilities
cPanel is a Web-based hosting control management system from the U.S. company cPanel. The management system is mainly used to automate the control of web sites and servers. cgiemail is one of the mail servers. An HTTP header injection vulnerability exists in cgiemail and cgiecho. An attacker can...
CVE-2016-0310
IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain...
CVE-2016-0310
IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain...
CVE-2016-0310
CVE-2016-0310 affects IBM Connections 5.5 and earlier. The vulnerability is a host header injection flaw that can cause navigation to the attacker’s domain. Root cause noted in CNVD records: the program fails to properly validate HTTP request headers, enabling manipulation via the Host header. Ex...
CVE-2016-0310: Improper Neutralization of Input During Web Page Generation
IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain...
PT-2017-7608
Name of the Vulnerable Software and Affected Versions IBM Connections versions 5.5 and earlier Description The issue allows for a possible host header injection attack, which could cause navigation to the attacker's domain. Recommendations For IBM Connections versions 5.5 and earlier, update to a...
Ubiquiti Inc.: AirFibre products vulnerable to HTTP Header injection
The uri GET parameter of Login.cgi is directly used on login to generate HTTP headers without sanitisation. An user could be tricked into logging into the device and then redirected to a malicious location or attacked through other HTTP Header injection attacks. Vulnerable code: if isset$uri &&...
CVE-2016-6484
CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the contentType parameter in a login action to config/userAdmin/login.tdf...
aerial (0.1.0), afterparty (0.1.0) +345 more potentially affected by CVE-2017-18587 via hyper (>=0.0.1, <=0.9.14)
hyper CARGO version =0.0.1, =0.7.0, =0.1.0, =0.1.3, =0.5.1, =0.1.2, =0.5.3, =0.1.0, =0.1.0, =0.3.0 and more Source cves: CVE-2017-18587 Source advisory: OSV:RUSTSEC-2017-0002...