4960 matches found
CVE-2016-0310
IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain...
CVE-2016-0310
CVE-2016-0310 affects IBM Connections 5.5 and earlier. The vulnerability is a host header injection flaw that can cause navigation to the attacker’s domain. Root cause noted in CNVD records: the program fails to properly validate HTTP request headers, enabling manipulation via the Host header. Ex...
CVE-2016-0310: Improper Neutralization of Input During Web Page Generation
IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain...
PT-2017-7608
Name of the Vulnerable Software and Affected Versions IBM Connections versions 5.5 and earlier Description The issue allows for a possible host header injection attack, which could cause navigation to the attacker's domain. Recommendations For IBM Connections versions 5.5 and earlier, update to a...
CVE-2016-6285
Cross-site scripting XSS vulnerability in includes/decorators/global-translations.jsp in Atlassian JIRA before 7.2.2 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header...
Cross site scripting
Cross-site scripting XSS vulnerability in includes/decorators/global-translations.jsp in Atlassian JIRA before 7.2.2 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header...
CVE-2016-6285
Cross-site scripting XSS vulnerability in includes/decorators/global-translations.jsp in Atlassian JIRA before 7.2.2 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header...
CVE-2016-6285
Cross-site scripting XSS vulnerability in includes/decorators/global-translations.jsp in Atlassian JIRA before 7.2.2 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header...
PT-2017-8955
Name of the Vulnerable Software and Affected Versions Atlassian JIRA versions prior to 7.2.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header. This affects the includes/decorators/global-translations.jsp file...
CVE-2016-6285: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in includes/decorators/global-translations.jsp in Atlassian JIRA before 7.2.2 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header...
Design/Logic Flaw
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header...
UBUNTU-CVE-2016-7903
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header...
CVE-2016-7903
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header...
CVE-2016-7903
Dotclear before 2.10.3 is vulnerable to password reset address forgery because the HTTP Host header is not included in the web server routing process. This allows remote attackers to modify the password reset link. A patch is available in Dotclear 2.10.3; upgrading is recommended. (Affected: Dotc...
CVE-2016-7903
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header...
CVE-2016-7903: Undefined Security Weakness
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header...
PT-2017-9411
Name of the Vulnerable Software and Affected Versions Dotclear versions prior to 2.10.3 Description The issue allows remote attackers to modify the password reset address link by manipulating the HTTP Host header when it is not part of the web server routing process. Recommendations For versions...
Host Header Poisoning
morepath is vulnerable to host header poisoning. It does not validate the request host, allowing header poisoning attacks...
DEBIAN-CVE-2016-9014
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWEDHOSTS...
ALPINE-CVE-2016-9014
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWEDHOSTS...