108 matches found
CVE-2018-21245
Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...
Sql injection
Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...
CVE-2018-21245
Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...
UBUNTU-CVE-2018-21245
Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...
CVE-2018-21245
CVE-2018-21245 affects Pound up to version 2.8, enabling HTTP request smuggling due to a vulnerability related to CVE-2016-10711. The issue is described across multiple feeds as a Pound HTTP handling flaw that can impact confidentiality and integrity (per NVD CVSS data: high impact on both C and ...
CVE-2018-21245
Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...
CVE-2018-21245
Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...
[SECURITY] [DLA 2196-2] pound regression update
Package : pound Version : 2.6-6+deb8u3 CVE ID : CVE-2016-10711 A regression has been found in the patch for CVE-2016-10711 of pound, a reverse proxy, load balancer and HTTPS front-end for Web servers. Without the fix pound can be tricked to use 100% CPU. For Debian 8 "Jessie", this problem has be...
DLA-2196-2 pound - regression update
Bulletin has no description...
Debian: Security Advisory (DLA-2196-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2196-2 : pound regression update
A regression has been found in the patch for CVE-2016-10711 of pound, a reverse proxy, load balancer and HTTPS front-end for Web servers. Without the fix pound can be tricked to use 100% CPU. For Debian 8 'Jessie', this problem has been fixed in version 2.6-6+deb8u3. We recommend that you upgrade...
[SECURITY] [DLA 2196-1] pound security update
Package : pound Version : 2.6-6+deb8u2 CVE ID : CVE-2016-10711 An issue has been found in pound, A request smuggling vulnerability was discovered in pound, a everse proxy, load balancer and HTTPS front-end for Web servers, that may allow attackers to send a specially crafted http request to a web...
DLA-2196-1 pound - security update
Bulletin has no description...
how-many-ounces-in-a-pound.com Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8574 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting how-many-ounces-in-a-pound.com website and its users...
The vulnerability of the Apsis Pound proxy server, related to HTTP request processing flaws, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).
The vulnerability of the Apsis Pound proxy server is related to HTTP request processing flaws. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely, using specially crafted headers for such attacks...
Debian: Security Advisory (DLA-1280-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1280-1 : pound security update
A request smuggling vulnerability was discovered in pound that may allow attackers to send a specially crafted http request to a web server or reverse proxy while pound may see a different set of requests. This facilitates several possible exploitations, such as partial cache poisoning, bypassing...
[SECURITY] [DLA 1280-1] pound security update
Package : pound Version : 2.6-2+deb7u2 CVE ID : CVE-2016-10711 Debian Bug : 888786 A request smuggling vulnerability was discovered in pound that may allow attackers to send a specially crafted http request to a web server or reverse proxy while pound may see a different set of requests. This...
DLA-1280-1 pound - security update
Bulletin has no description...
openSUSE Security Update : pound (openSUSE-2018-143)
This update for pound fixes one issue. This security issue was fixed : - CVE-2016-10711: Prevent request smuggling via crafted headers bsc1078298. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...