CVE-2010-0360

Sun Java System Web Server aka SJWS 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap...

CVE-2010-0386

The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing XST attack, a related issue to CVE-2004-2763 and CVE-2005-3398...

EUVD-2003-1117

Malware in sbrugna...

EUVD-2009-2813

Malware in sbrugna...

EUVD-2011-5025

Malware in sbrugna...

EUVD-2004-2753

Malware in sbrugna...

EUVD-2004-2312

Malware in sbrugna...

EUVD-2005-4865

Malware in sbrugna...

EUVD-2010-0417

Malware in sbrugna...

EUVD-2010-0391

Malware in sbrugna...

EUVD-2006-6419

Malware in sbrugna...

EUVD-2007-3000

Malware in sbrugna...

EUVD-2012-2217

Malware in sbrugna...

EUVD-2006-4671

Malware in sbrugna...

EUVD-2008-7209

Malware in sbrugna...

CVE-2011-5125

Cross-site scripting XSS vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving the HTTP TRACE method...

CVE-2004-2763

The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing XST attacks in applications that are vulnerable to cross-site scripting...

CVE-2008-7253

The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing XST attack, a related issue to CVE-2004-2763 and...

Buffalo LS210D < 1.82 Multiple Vulnerabilities

Buffalo LS210D is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:buffalo:ls210dfirmware"; if...

How to Block HTTP TRACE Method by Using Responder Policy

This article describes how to use responder policy to block http trace method when clients access origin web servers behind lb virtual server...