17248 matches found
CVE-2022-44621 Apache Kylin: Command injection by Diagnosis Controller
Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request...
CVE-2022-44621 Apache Kylin: Command injection by Diagnosis Controller
Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request...
CVE-2022-44621
CVE-2022-44621 relates to Apache Kylin and concerns the Diagnosis Controller. The underlying issue is missing parameter validation in the controller, enabling potential command injection through HTTP requests. Multiple sources describe this as a high-severity, remote-execution risk (CVSS v3.1 bas...
Duplicate Advisory: GoBase Race Condition vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h2x7-2ff6-v32p. This link is maintained to preserve external references. Original Description A race condition can cause incorrect HTTP request routing...
GHSA-4348-X292-H437 Duplicate Advisory: GoBase Race Condition vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h2x7-2ff6-v32p. This link is maintained to preserve external references. Original Description A race condition can cause incorrect HTTP request routing...
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2022-2866)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability in the implementation of the `rejectIllegalHeader` attribute in the Apache Tomcat application server allows a attacker to send hidden HTTP requests (HTTP Request Smuggling attack).
The vulnerability of the Apache Tomcat application server’s implementation of the rejectIllegalHeader attribute is related to deficiencies in the processing of HTTP requests containing the Content-Length header. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests...
CVE-2022-2583
A race condition can cause incorrect HTTP request routing...
Race condition
A race condition can cause incorrect HTTP request routing...
CVE-2022-2583 Race condition in github.com/ntbosscher/gobase
A race condition can cause incorrect HTTP request routing...
CVE-2022-2583 Race condition in github.com/ntbosscher/gobase
A race condition can cause incorrect HTTP request routing...
CVE-2022-2583 Race condition in github.com/ntbosscher/gobase
A race condition can cause incorrect HTTP request routing...
K82567234: NodeJS vulnerability CVE-2022-32215
Security Advisory Description The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling HRS. CVE-2022-32215 Impact Impact There is no impact; F5 products are not affected b...
EulerOS Virtualization 2.10.0 : httpd (EulerOS-SA-2022-2866)
According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an...
EulerOS Virtualization 2.10.1 : httpd (EulerOS-SA-2022-2884)
According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an...
CVE-2022-41654
An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2022-41697
A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability...
CVE-2022-41654
An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2022-41654
CVE-2022-41654 affects Ghost Foundation Ghost 5.9.4. Cisco Talos details an authentication bypass in the newsletter subscription feature, enabling an unauthenticated or minimal-auth attacker to manipulate newsletters via the /members/api/member/ endpoint, potentially creating or modifying newslet...