Lucene search
K

37 matches found

Rosalinux
Rosalinux
added 2026/02/16 7:14 a.m.10 views

Advisory ROSA-SA-2026-3146

Software: grafana 9.2.10 OS: ROSA Virtualization 3.1 unaffected versions = grafana-9.2.10-27.rv31 affected versions grafana-9.2.10-27.rv31 CVE-ID: CVE-2025-22871 BDU-ID: 2025-04014 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the net/http package of the Go programming language is related to...

10CVSS8.2AI score0.944EPSS
Exploits29
RedhatCVE
RedhatCVE
added 2026/01/27 3:23 p.m.1 views

CVE-2025-41082

Illegal HTTP request traffic vulnerability CL.0 in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers. This can cause a desynchronization of requests between frontend and backend servers, which...

6.9CVSS5.9AI score0.00024EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/11/28 11:36 a.m.6 views

Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in net/http/internal CVE-2025-22871

Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in net/http/internal CVE-2025-22871 Vulnerability Details CVEID:CVE-2025-22871 DESCRIPTION: The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This...

9.1CVSS6.5AI score0.00294EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-0332

Malware in sbrugna...

4.3CVSS4.8AI score0.00182EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-5218

Malware in sbrugna...

7.5CVSS7.4AI score0.03099EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/04 12:0 a.m.2 views

RockyLinux 10 : delve (RLSA-2025:9317)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9317 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly...

9.1CVSS7.1AI score0.00294EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-3462

Malicious code in bioql PyPI...

7.4CVSS7.3AI score0.00572EPSS
Exploits0References10
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-15674

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.02547EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

EulerOS 2.0 SP9 : golang (EulerOS-SA-2025-2126)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a...

9.1CVSS7AI score0.00294EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2025/09/09 3:23 p.m.2 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00294EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/06/30 5:50 p.m.5 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00294EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/06/25 1:57 p.m.3 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00294EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/06/25 1:37 p.m.4 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00294EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/06/23 2:44 a.m.2 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00294EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 3:9 p.m.2 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00294EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 1:43 a.m.3 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00294EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 1:42 a.m.3 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00294EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 1:32 a.m.2 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00294EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 1:15 a.m.2 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00294EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/06/17 12:49 a.m.1 views

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

9.1CVSS7.1AI score0.00294EPSS
Exploits0References8
Rows per page
Query Builder