3961 matches found
SonicWall SonicOS Buffer Overflow Vulnerability (CNVD-2022-06901)
A buffer overflow vulnerability exists in SonicWall SonicOS, an operating system designed for SonicWall firewall appliances from SonicWall, Inc. response header boundary. A remote, unauthenticated attacker could use this vulnerability to send a special HTTP response that triggers a stack-based...
CVE-2021-38956
IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive version information in HTTP response headers that could aid in further attacks against the system. IBM X-Force ID: 212038...
CVE-2021-20048
A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service DoS and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions...
CVE-2021-45818
SAFARI Montage 8.7.32 is affected by a CRLF injection vulnerability which can lead to HTTP response splitting...
Crlf injection
SAFARI Montage 8.7.32 is affected by a CRLF injection vulnerability which can lead to HTTP response splitting...
CVE-2021-45818
SAFARI Montage 8.7.32 is affected by a CRLF injection vulnerability which can lead to HTTP response splitting...
CVE-2021-45818
CVE-2021-45818 : The connected sources confirm a CRLF injection in SAFARI Montage 8.7.32 , enabling HTTP response splitting. The root cause is improper input validation that allows CRLF characters to be injected into responses. Impact is described as potential compromise of response integrity; CV...
CVE-2021-39013
CVE-2021-39013 affects IBM Cloud Pak for Security (CP4S) versions 1.7.2.0, 1.7.1.0, and 1.7.0.0. An authenticated user can obtain sensitive information in HTTP responses, which could be used to support further attacks against the system. The vulnerability details and affected versions are support...
IBM Cloud Pak for Security 信息泄露漏洞
IBM Cloud Pak for Security is an application from IBM America, Inc. An open security platform that connects to your existing data sources to generate deeper insights and enables you to take automated action faster. A security vulnerability exists in IBM Cloud Pak for Security CP4S that stems from...
CVE-2021-37939
An information disclosure flaw was found in kibana. A malicious user with the ability to create connectors could utilize the JIRA and IBM Resilient connectors to view limited HTTP response data on hosts accessible to the cluster...
CVE-2021-37939
It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts, which may be intentionally hidden from public view. Using this vulnerability, a malicious user with the ability to create connectors, could utilize these connecto...
CVE-2021-37939
It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts, which may be intentionally hidden from public view. Using this vulnerability, a malicious user with the ability to create connectors, could utilize these connecto...
Design/Logic Flaw
It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts, which may be intentionally hidden from public view. Using this vulnerability, a malicious user with the ability to create connectors, could utilize these connecto...
CVE-2021-37939
Kibana’s JIRA and IBM Resilient connectors have a vulnerability that can disclose limited HTTP response data from internal hosts accessible to the cluster when a user can create connectors. Affected product: Kibana (connectors). Root cause: information disclosure via connectors. Impact: exposure ...
CVE-2021-37939
It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts, which may be intentionally hidden from public view. Using this vulnerability, a malicious user with the ability to create connectors, could utilize these connecto...
Elastic Kibana Information Disclosure Vulnerability (ESA-2021-27)
Kibana is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana";...
Oracle Linux 8 : pki-core:10.6 / and / pki-deps:10.6 (ELSA-2021-1775)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1775 advisory. - Bug 1914396 - CVE-2021-20179 pki-core:10.6/pki-core: Unprivileged users can renew any certificate - CVE-2020-1695: Improper validation of response header in...
RHEL 8 : squid:4 (RHSA-2021:4292)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4292 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The following packages have...
CentOS 8 : squid:4 (CESA-2021:4292)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4292 advisory. - squid: denial of service in URN processing CVE-2021-28651 - squid: denial of service issue in Cache Manager CVE-2021-28652 - squid: denial of service...
