CVE-2021-27627

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method ChartInterpreter::DoIt which will...

CVE-2021-31251

An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially malformed request and an attacker may force the remote telnet server to...

CVE-2021-31251

An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially malformed request and an attacker may force the remote telnet server to...

CVE-2021-32637 Authentication bypassed with malformed request URI

Authelia is a a single sign-on multi-factor portal for web apps. This affects uses who are using nginx ngxhttpauthrequestmodule with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect...

Github authelia 授权问题漏洞

Github authelia is an application from Github USA. An open source authentication and authorization server that provides 2-factor authentication and single sign-on SSO to applications through a web portal. Authelia versions prior to 4.29.3 have an authorization issue vulnerability that allows a...

U.S. Dept Of Defense: Web Cache Poisoning on █████

Description: The web application https://████████ uses a web cache to more efficiently serve its pages to the users. An attacker can send a malformed request which the server caches the response of and sends it to the users. Impact An attacker can alter the web cache, making the web application...

IBM Elastic Storage System 安全漏洞

IBM Elastic Storage System is an appliance for data management of large data volumes from IBM in the United States. A denial of service vulnerability exists in IBM Elastic Storage System, which can be exploited by an attacker to deny service by sending a malformed UDP request...

Node-Red Security Vulnerabilities

Node-Red is an open source stream-based visual programming development tool for connecting hardware devices, APIs and online services together as part of the Internet of Things. Node-Red has a security vulnerability that stems from the admin API containing a Prototype Pollution vulnerability. An...

CVE-2021-22166

An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method...

PT-2021-14881 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 13.7 and later Description: An attacker could cause a denial of service in GitLab by sending an HTTP request with a method that is malformed. Recommendations: For GitLab versions 13.7 and later, update to a version that includ...

IBM Verify Gateway (IVG) Denial of Service Vulnerability

IBM Verify Gateway IVG is a cloud-based authentication solution from IBM in the United States. A denial of service vulnerability exists in IBM Verify Gateway IVG. An attacker could exploit this vulnerability to cause a denial of service with a malformed request...

Cisco ASR 5000 Input Validation Error Vulnerability

Cisco ASR 5000 is a 5000 series gateway product from Cisco. An input validation error vulnerability exists in the Enhanced Charging Service ECS feature in Cisco ASR 5000 Series Aggregation Services Routers versions prior to Release 21.18.0. A remote attacker could exploit this vulnerability by...

Microsoft IIS Server Tampering Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.IIS Server is one of the IIS Internet Information Services servers. A...

CVE-2020-0645

A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering Vulnerability'...

Envoy Null Pointer Dereference Vulnerability

Envoy is an open source, high performance edge, middle and service agent. A null pointer dereference vulnerability exists in Envoy 1.12.0, which can be exploited to cause an abnormal termination of an Envoy process by sending a malformed HTTP request without a Host header...

RHEL 7 / 8 : Red Hat OpenShift Service Mesh 1.0.3 RPMs (RHSA-2019:4222)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:4222 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...

Privilege Escalation

servicemesh is vulnerable to privilege escalation. A malformed request header may cause bypass of route matchers resulting in escalation of privileges or information disclosure...

envoy: malformed HTTP request without the Host header may cause abnormal termination of the Envoy process

A flaw was found in envoy. A malformed HTTP request without the Host header may cause abnormal termination of the Envoy process. The highest threat from this vulnerability is to system availability...

Cisco Web Security Appliance Malformed Request Denial of Service Vulnerability

A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of HTTP and HTTPS requests. A...

CVE-2018-5734 A malformed request can trigger an assertion failure in badcache.c

While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected...