aiohttp HTTP Client

The vulnerability of the aiohttp HTTP client is related to the inconsistent interpretation of HTTP requests. Exploiting this vulnerability allows an attacker who operates remotely to carry out attacks by replacing HTTP requests with malicious content...

USN-7115-1 Waitress vulnerabilities

It was discovered that Waitress could process follow up requests when receiving a specially crafted message. An attacker could use this issue to have the server process inconsistent client requests. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. CVE-2024-49768 Dylan Jay discovered th...

Eclipse Jetty HTTP Request Interpretation

The vulnerability of Eclipse Jetty servlet containers is related to inconsistent interpretation of HTTP requests. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Apache HTTP Server HTTP/2 DoS

The vulnerability of the HTTP/2 web server implementation in the Apache HTTP Server is related to inconsistent interpretation of http requests. Exploiting this vulnerability can allow a malicious actor to cause service failures or lead to incorrect server configuration...

Squid proxy server XSS

The vulnerability of the Squid proxy server is related to inconsistent interpretation of HTTP requests. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks XSS...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Apache HTTP Server vulnerabilities (USN-3937-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3937-1 advisory. Charles Fol discovered that the Apache HTTP Server incorrectly handled the scoreboard shared memory area. A remote attacker able ...