Lucene search
K

32 matches found

Cvelist
Cvelist
added 2023/05/30 5:0 a.m.14 views

CVE-2023-26130

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. Note: This issue is present due...

7.5CVSS8.4AI score0.00189EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2023/05/30 5:0 a.m.16 views

CVE-2023-26130

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. Note: This issue is present due...

8.8CVSS8.9AI score0.00189EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2023/05/30 12:0 a.m.26 views

CVE-2023-26130

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. Note: This issue is present due...

8.8CVSS7.2AI score0.00189EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:10 a.m.2 views

SUSE CVE-2007-5268

pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use 1 logical instead of bitwise operations and 2 incorrect comparisons, which might allow remote attackers to cause a denial of service crash via a crafted PNG image...

4.3CVSS6.8AI score0.14166EPSS
Exploits1References3
NVD
NVD
added 2023/01/18 7:15 p.m.7 views

CVE-2023-0040

Versions of Async HTTP Client prior to 1.13.2 are vulnerable to a form of targeted request manipulation called CRLF injection. This vulnerability was the result of insufficient validation of HTTP header field values before sending them to the network. Users are vulnerable if they pass untrusted...

7.5CVSS7.7AI score0.00356EPSS
Exploits0References1
NVD
NVD
added 2022/10/11 9:15 p.m.10 views

CVE-2022-35299

SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow...

9.8CVSS0.0057EPSS
Exploits0References2
NVD
NVD
added 2022/05/11 4:15 p.m.14 views

CVE-2022-29616

SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to cause a memory corruption...

7.5CVSS0.00408EPSS
Exploits0References2
Prion
Prion
added 2022/05/11 4:15 p.m.10 views

Memory corruption

SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to cause a memory corruption...

5CVSS7.4AI score0.00408EPSS
Exploits0References2Affected Software3
Cvelist
Cvelist
added 2022/05/11 3:8 p.m.16 views

CVE-2022-29616

SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to cause a memory corruption...

7.6AI score0.00408EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/03/27 12:0 a.m.2 views

The vulnerability of the Microprogrammable Software-based Intel Converged Security and Manageability Engine and Intel Server Platform Services, related to authentication process flaws (logical errors), allows attackers to bypass the MEBx authentication process.

The vulnerability of the Microprogrammable Software-based Intel Converged Security and Manageability Engine CSME and Intel Server Platform Services SPS is related to deficiencies in the authentication process logical error. Exploiting this vulnerability could allow a perpetrator to bypass the MEB...

6.9CVSS6.8AI score0.00068EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2018/04/19 8:29 p.m.21 views

Design/Logic Flaw

Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of servi...

7.8CVSS8.4AI score0.01586EPSS
Exploits0References4Affected Software2
CNVD
CNVD
added 2015/03/06 12:0 a.m.1 views

Memory Corruption Vulnerability in Ashampoo Photo Commander's Handling of ICO Images

Ashampoo Photo Commander Free is a photo management software from Germany. Ashampoo Photo Commander handles ICO images with logical errors that allow attackers to exploit vulnerabilities to parse malformed programs and cause the application to crash...

6.9AI score
Exploits0
Rows per page
Query Builder