2 matches found
CVE-2022-1271: Incorrect Behavior Order: Early Validation
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation...
8.8CVSS7.2AI score0.0507EPSS
SaveExploits0References3
DEBIAN-CVE-2008-0456
CRLF injection vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP respons...
2.6CVSS7.2AI score0.19036EPSS
SaveExploits1References1
20