Lucene search
+L

4 matches found

OSV
OSV
added 2021/02/08 8:15 p.m.3 views

DEBIAN-CVE-2021-21240

httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of "\xa0" characters in the "www-authenticate" header may cause Denial of Service CPU burn while parsing header of the httplib2 client accessing said...

7.5CVSS7.6AI score0.03983EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/02/08 8:15 p.m.5 views

CVE-2021-21240

httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of "\xa0" characters in the "www-authenticate" header may cause Denial of Service CPU burn while parsing header of the httplib2 client accessing said...

7.5CVSS7AI score0.03983EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2006/10/26 5:0 p.m.38 views

CVE-2006-5544

Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a malicious URL containing non-breaking spaces %A0, which causes the address bar to omit some characters from the URL...

6.5AI score0.20261EPSS
SaveExploits1References9
Mozilla
Mozilla
added 2005/02/24 12:0 a.m.17 views

Download dialog source spoofing — Mozilla

The true source of a download can be disguised by using a host name long enough that the most significant parts are truncated. Spoofing can be made even more convincing on windows if the subdomain labels contain a string of non-breaking space characters...

6.8AI score
SaveExploits0References2Affected Software2
Rows per page
Query Builder