Lucene search
+L

115 matches found

NVD
NVD
•added 2020/06/15 5:15 p.m.•25 views

CVE-2018-21245

Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...

9.1CVSS0.01127EPSS
SaveExploits0References2
Prion
Prion
•added 2020/06/15 5:15 p.m.•26 views

Sql injection

Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...

6.4CVSS9.3AI score0.02839EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2020/06/15 5:15 p.m.•25 views

CVE-2018-21245

Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...

9.1CVSS7.2AI score0.01127EPSS
SaveExploits0References3
OSV
OSV
•added 2020/06/15 5:15 p.m.•14 views

UBUNTU-CVE-2018-21245

Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...

9.1CVSS5.8AI score0.01127EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2020/06/15 4:50 p.m.•30 views

CVE-2018-21245

Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...

9.4AI score0.01127EPSS
SaveExploits0References2
CVE
CVE
•added 2020/06/15 4:50 p.m.•81 views

CVE-2018-21245

CVE-2018-21245 affects Pound up to version 2.8, enabling HTTP request smuggling due to a vulnerability related to CVE-2016-10711. The issue is described across multiple feeds as a Pound HTTP handling flaw that can impact confidentiality and integrity (per NVD CVSS data: high impact on both C and ...

9.1CVSS9.2AI score0.01127EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2020/06/15 4:50 p.m.•39 views

CVE-2018-21245

Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...

9.1CVSS9.5AI score0.01127EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/15 12:00 a.m.•3 views

CVE-2018-21245: Inconsistent Interpretation of HTTP Requests

Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711...

9.1CVSS8.2AI score0.01127EPSS
SaveExploits0References2
Debian
Debian
•added 2020/05/03 5:59 p.m.•87 views

[SECURITY] [DLA 2196-2] pound regression update

Package : pound Version : 2.6-6+deb8u3 CVE ID : CVE-2016-10711 A regression has been found in the patch for CVE-2016-10711 of pound, a reverse proxy, load balancer and HTTPS front-end for Web servers. Without the fix pound can be tricked to use 100% CPU. For Debian 8 "Jessie", this problem has be...

9.8CVSS9.4AI score0.02839EPSS
SaveExploits0
OSV
OSV
•added 2020/05/03 12:00 a.m.•9 views

DLA-2196-2 pound - regression update

Bulletin has no description...

7.2AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2020/05/01 12:00 a.m.•74 views

Debian: Security Advisory (DLA-2196-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.5AI score0.02839EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2020/05/01 12:00 a.m.•72 views

Debian DLA-2196-2 : pound regression update

A regression has been found in the patch for CVE-2016-10711 of pound, a reverse proxy, load balancer and HTTPS front-end for Web servers. Without the fix pound can be tricked to use 100% CPU. For Debian 8 'Jessie', this problem has been fixed in version 2.6-6+deb8u3. We recommend that you upgrade...

9.8CVSS7.9AI score0.02839EPSS
SaveExploits0References3
Debian
Debian
•added 2020/04/30 3:26 p.m.•122 views

[SECURITY] [DLA 2196-1] pound security update

Package : pound Version : 2.6-6+deb8u2 CVE ID : CVE-2016-10711 An issue has been found in pound, A request smuggling vulnerability was discovered in pound, a everse proxy, load balancer and HTTPS front-end for Web servers, that may allow attackers to send a specially crafted http request to a web...

9.8CVSS9.2AI score0.02839EPSS
SaveExploits0
OSV
OSV
•added 2020/04/30 12:00 a.m.•22 views

DLA-2196-1 pound - security update

Bulletin has no description...

9.8CVSS9.3AI score0.02839EPSS
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/02/02 2:33 p.m.•7 views

how-many-ounces-in-a-pound.com Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8574 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting how-many-ounces-in-a-pound.com website and its users...

0.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2018/09/05 12:00 a.m.•4 views

PT-2020-8889

Name of the Vulnerable Software and Affected Versions Pound versions prior to 2.8 Description The issue allows HTTP request smuggling, which is related to other security concerns. Recommendations For versions prior to 2.8, update to version 2.8 or later to resolve the issue...

9.1CVSS0.01127EPSS
SaveExploits0References17
BDU FSTEC
BDU FSTEC
•added 2018/03/16 12:00 a.m.•18 views

The vulnerability of the Apsis Pound proxy server, related to HTTP request processing flaws, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the Apsis Pound proxy server is related to HTTP request processing flaws. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely, using specially crafted headers for such attacks...

9.8CVSS7.8AI score0.02839EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
•added 2018/02/20 12:00 a.m.•29 views

Debian: Security Advisory (DLA-1280-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.5AI score0.02839EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2018/02/13 12:00 a.m.•33 views

Debian DLA-1280-1 : pound security update

A request smuggling vulnerability was discovered in pound that may allow attackers to send a specially crafted http request to a web server or reverse proxy while pound may see a different set of requests. This facilitates several possible exploitations, such as partial cache poisoning, bypassing...

9.8CVSS8.1AI score0.02839EPSS
SaveExploits0References3
Debian
Debian
•added 2018/02/12 11:15 p.m.•88 views

[SECURITY] [DLA 1280-1] pound security update

Package : pound Version : 2.6-2+deb7u2 CVE ID : CVE-2016-10711 Debian Bug : 888786 A request smuggling vulnerability was discovered in pound that may allow attackers to send a specially crafted http request to a web server or reverse proxy while pound may see a different set of requests. This...

9.8CVSS9.6AI score0.02839EPSS
SaveExploits0
Rows per page
Query Builder