2448 matches found
CVE-2008-3906
CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string...
FreeBSD : ruby -- multiple vulnerabilities (f7fcb75c-e537-11e9-863e-b9b7af01ba9e)
Ruby news : This release includes security fixes. Please check the topics below for details. CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and File.fnmatch? A NUL injection vulnerability of Ruby built-in methods File.fnmatch and File.fnmatch? was found. An attacker who has the...
CVE-2019-15259
A vulnerability in Cisco Unified Contact Center Express UCCX Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system...
Cross site scripting
A vulnerability in Cisco Unified Contact Center Express UCCX Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system...
CVE-2019-15259 Cisco Unified Contact Center Express HTTP Response Splitting Vulnerability
A vulnerability in Cisco Unified Contact Center Express UCCX Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system...
CVE-2019-15259 Cisco Unified Contact Center Express HTTP Response Splitting Vulnerability
A vulnerability in Cisco Unified Contact Center Express UCCX Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system...
CVE-2019-15259
CVE-2019-15259 affects Cisco Unified Contact Center Express (UCCX) and relates to an HTTP response splitting vulnerability caused by insufficient input validation in certain web-server parameters. An unauthenticated, remote attacker could entice a user to follow a malicious link or intercept a re...
Cisco Unified Contact Center Express CVE-2019-15259 HTTP Response Splitting Vulnerability
Description Cisco Unified Contact Center Express is prone to an HTTP response-splitting vulnerability. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into having a...
[ASA-201910-2] ruby: multiple issues
Arch Linux Security Advisory ASA-201910-2 ========================================= Severity: Medium Date : 2019-10-02 CVE-ID : CVE-2019-15845 CVE-2019-16201 CVE-2019-16254 CVE-2019-16255 Package : ruby Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1039 Summary...
Ruby Multiple Security Vulnerabilities
Description Ruby is prone to the following security vulnerabilities: 1. An authorization-bypass vulnerability 2. A denial-of-service vulnerability 3. An HTTP response-splitting vulnerability 4. A command-injection vulnerability An attacker can exploit these issues to bypass certain security...
HTTP response splitting in WEBrick (Additional fix)
If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to deceive clients. This is the same issue as CVE-2017-17742. The previous fix was incomplete, which addressed the...
YzmCMS 5.3 - 'Host' Header Injection
Exploit Title: YzmCMS 5.3 - 'Host' Header Injection Exploit Author: Debashis Pal Vendor Homepage: http://www.yzmcms.com/ Source: https://github.com/yzmcms/yzmcms Version: YzmCMS V5.3 CVE : N/A Tested on: Windows 7 SP164bit,XAMPP: 7.3.9 About YzmCMS ============== YzmCMS is a lightweight open sour...
CVE-2019-5314
Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...
CVE-2019-5314
Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...
Crlf injection
Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...
CVE-2019-5314
Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...
CVE-2019-5314
CVE-2019-5314 concerns ArubaOS web components vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. The public descriptions state an attacker could trigger this by sending specific URL parameters. The connected records confirm affected software class (ArubaOS) and the underlyi...
ruby, rubygem, rubygems security update
CentOS Errata and Security Advisory CESA-2019:2028 An update for ruby is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CentOS 7 : ruby (CESA-2019:2028)
An update for ruby is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...