Red Hat Undertow Environment Issues Vulnerabilities

Red Hat Undertow is a U.S. Red Hat Red Hat, a Java-based embedded Web server, is the default Web server Wildfly Java application server. An environment issue vulnerability exists in versions prior to Red Hat Undertow 2.1.1.Final. An attacker could exploit this vulnerability to cause HTTP requests...

netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling

A flaw was found in Netty, where it mishandles Transfer-Encoding whitespace. This flaw allows HTTP Request Smuggling...

The vulnerability of the web server of the Cisco Integrated Management Controller, a software-based remote management system for servers, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Integrated Management Controller, a software-based remote server management system, is related to improper checking of boundaries. Exploiting this vulnerability can allow an attacker to trigger a service failure through a specially created HTTP request...

CVE-2019-3919

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/usbrestoreForm?script/...

Cisco Firepower Threat Management Console Denial of Service Vulnerability

Cisco Firepower Management Center is a new generation of firewall management center software from the U.S. company Cisco Cisco. A denial of service attack vulnerability exists in the Cisco Firepower Threat Management Console, which allows a remote attacker to cause a denial of service by sending ...

The vulnerability of the automated system for managing technological processes, SIMATIC WinCC, allows a remote attacker to gain unauthorized access to confidential information.

A vulnerability in Siemens SIMATIC WinCC software exists, related to an error that occurs when processing a specially crafted HTTP packet. Exploiting this vulnerability allows a malicious individual to gain access to confidential information by sending a specially crafted HTTP request to ports...