Lucene search
K

276 matches found

OSV
OSV
added 2022/07/14 3:15 p.m.1 views

ALPINE-CVE-2022-32214

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling HRS...

6.5CVSS7AI score0.39294EPSS
Exploits1References1
OSV
OSV
added 2022/07/14 3:15 p.m.0 views

DEBIAN-CVE-2022-32214

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling HRS...

6.5CVSS6.6AI score0.39294EPSS
Exploits1References1
OSV
OSV
added 2022/07/14 3:15 p.m.3 views

AZL-10150 CVE-2022-32213 affecting package nodejs for versions less than 16.20.2-4

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling HRS...

6.5CVSS6.7AI score0.86318EPSS
Exploits1References1
OSV
OSV
added 2022/07/14 3:15 p.m.1 views

DEBIAN-CVE-2022-32213

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling HRS...

6.5CVSS6.6AI score0.86318EPSS
Exploits1References1
OSV
OSV
added 2022/07/14 3:15 p.m.1 views

DEBIAN-CVE-2022-32215

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling HRS...

6.5CVSS6.6AI score0.86472EPSS
Exploits1References1
NVD
NVD
added 2022/07/14 3:15 p.m.26 views

CVE-2022-32213

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling HRS...

6.5CVSS0.86318EPSS
Exploits1References7
OSV
OSV
added 2022/07/14 3:15 p.m.19 views

CVE-2022-32214

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling HRS...

6.5CVSS1AI score
Exploits0References3
OSV
OSV
added 2022/07/14 3:15 p.m.2 views

AZL-10151 CVE-2022-32214 affecting package nodejs for versions less than 16.16.0-1

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling HRS...

6.5CVSS6.7AI score0.39294EPSS
Exploits1References1
OSV
OSV
added 2022/07/14 3:15 p.m.40 views

CVE-2022-32215

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling HRS...

6.5CVSS1.1AI score
Exploits0References7
NVD
NVD
added 2022/07/14 3:15 p.m.17 views

CVE-2022-32214

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling HRS...

6.5CVSS0.39294EPSS
Exploits1References3
OSV
OSV
added 2022/07/14 3:15 p.m.1 views

ALPINE-CVE-2022-32213

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling HRS...

6.5CVSS7AI score0.86318EPSS
Exploits1References1
OSV
OSV
added 2022/07/14 3:15 p.m.27 views

CVE-2022-32213

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling HRS...

6.5CVSS0.9AI score
Exploits0References7
OSV
OSV
added 2022/07/14 3:15 p.m.1 views

AZL-41446 CVE-2022-32215 affecting package rust for versions less than 1.75.0-1

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling HRS...

6.5CVSS6.7AI score0.86472EPSS
Exploits1References1
Prion
Prion
added 2022/07/14 3:15 p.m.24 views

Code injection

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling HRS...

6.4CVSS6.9AI score0.86318EPSS
Exploits1References7Affected Software6
Prion
Prion
added 2022/07/14 3:15 p.m.18 views

Crlf injection

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling HRS...

6.4CVSS6.8AI score0.39294EPSS
Exploits1References3Affected Software4
Prion
Prion
added 2022/07/14 3:15 p.m.21 views

Design/Logic Flaw

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling HRS...

6.4CVSS6.9AI score0.86472EPSS
Exploits1References7Affected Software6
ATTACKERKB
ATTACKERKB
added 2022/07/14 3:15 p.m.0 views

CVE-2022-32213

The llhttp parser...

6.5CVSS8.9AI score0.86318EPSS
Exploits1References12Affected Software1
OSV
OSV
added 2022/07/14 3:15 p.m.1 views

UBUNTU-CVE-2022-32213

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling HRS...

6.5CVSS6.8AI score0.86318EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2022/07/14 3:15 p.m.0 views

CVE-2022-32214

The llhttp parser...

6.5CVSS8.9AI score0.39294EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2022/07/14 3:15 p.m.0 views

UBUNTU-CVE-2022-32215

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling HRS...

6.5CVSS6.8AI score0.86472EPSS
Exploits1References6
Rows per page
Query Builder