16303 matches found
CVE-2022-1165
The Blackhole for Bad Bots WordPress plugin before 3.3.2 uses headers such as CF-CONNECTING-IP, CLIENT-IP etc to determine the IP address of requests hitting the blackhole URL, which allows them to be spoofed. This could result in blocking arbitrary IP addresses, such as legitimate/good search...
CVE-2022-26616
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting XSS attacks via crafted HTTP headers...
CVE-2022-26616
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting XSS attacks via crafted HTTP headers...
Cross site scripting
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting XSS attacks via crafted HTTP headers...
CVE-2022-26616
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting XSS attacks via crafted HTTP headers...
CVE-2022-26616
CVE-2022-26616 affects PKP Vendor Open Journal System versions 2.4.8 through 3.3.8. The vulnerability is a reflected cross-site scripting (XSS) flaw exploitable via crafted HTTP headers, allowing an attacker to inject script that is reflected in the user’s response. Connected sources (Red Hat, NV...
CVE-2022-26616
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting XSS attacks via crafted HTTP headers...
CVE-2022-26616: Improper Neutralization of Input During Web Page Generation
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting XSS attacks via crafted HTTP headers...
PT-2022-17956
Name of the Vulnerable Software and Affected Versions PKP Vendor Open Journal System versions 2.4.8 through 3.3.8 Description The issue allows attackers to perform reflected cross-site scripting XSS attacks via crafted HTTP headers. This can potentially lead to unauthorized access or control of...
Unable to launch desktop via Gateway in invoked mode ( Client Detection done and selected workspace to Always Open ICA file )
Unable to launch desktop via Gateway in invoked mode. ICA launch works downloading the file, non invoked mode and clicking on it works In the non-working response for ICA file download, we see Riverbed headers highlighted and the "Connection: close" header being stripped...
CVE-2022-28145
Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier does not apply Content-Security-Policy headers to report files it serves, resulting in a stored cross-site scripting XSS exploitable by attackers with Item/Configure permission or otherwise able to control report contents...
VulnCheck KEV: CVE-2019-10068
Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution...
PT-2022-28159 · Guzzle +3 · Guzzlehttp/Psr7 +3
Name of the Vulnerable Software and Affected Versions: guzzlehttp/psr7 versions prior to 1.9.1 guzzlehttp/psr7 versions prior to 2.4.5 Description: The issue concerns improper header parsing, allowing an attacker to sneak in a newline into both the header names and values. Many servers will also...
Kentico Xperience Deserialization of Untrusted Data Vulnerability
Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution...
dev-python/twisted: secret exposure in cross-origin redirects
A flaw was found in the twisted Python library when WebClient redirects via the RedirectAgent and BrowserLikeRedirectAgent methods. This flaw allows an attacker to take advantage of these cross-origin redirects and leak the cookie and authorization headers...
Inproper parsing of HTTP headers
Impact Improper header parsing. An attacker could sneak in a carriage return character \r and pass untrusted values in both the header names and values. Patches The issue is patched in 1.8.4 and 2.1.1. Workarounds There are no known workarounds. References...
PT-2022-29018
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.13 through 5.16.11 Description The issue concerns the handling of outer IP headers in certain network configurations, specifically in cases involving IP-in-IP IPIP and net failover. The problem was introduced in version...
PT-2022-29207
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.269 Description The issue concerns the handling of outer IP headers in certain network configurations, specifically in cases involving IP-in-IP IPIP and net failover. The actual impact and potential for...
PT-2022-29135
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.13 through 5.10.102 Description The issue concerns the handling of outer IP headers in certain network configurations, specifically in cases involving IP-in-IP IPIP and net failover. The problem was introduced in versio...
