Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-3234

Malware in sbrugna...

5CVSS8.5AI score0.08372EPSS
Exploits0References18
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-1370

Malware in sbrugna...

5CVSS9.3AI score0.00317EPSS
Exploits0References12
Prion
Prion
added 2015/09/18 10:59 a.m.20 views

Code injection

The CFNetwork Proxies component in Apple iOS before 9 does not properly handle a Set-Cookie header within a response to an HTTP CONNECT request, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response...

5CVSS6.1AI score0.0062EPSS
Exploits0References8Affected Software3
Cvelist
Cvelist
added 2015/09/18 10:0 a.m.20 views

CVE-2015-5841

The CFNetwork Proxies component in Apple iOS before 9 does not properly handle a Set-Cookie header within a response to an HTTP CONNECT request, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response...

5.7AI score0.0062EPSS
Exploits0References8
Cvelist
Cvelist
added 2015/05/01 3:0 p.m.18 views

CVE-2015-3153

The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents...

6.4AI score0.08372EPSS
Exploits0References14
Debian CVE
Debian CVE
added 2015/05/01 3:0 p.m.25 views

CVE-2015-3153

The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents...

5CVSS8.5AI score0.08372EPSS
Exploits0
Cvelist
Cvelist
added 2015/03/09 12:0 a.m.24 views

CVE-2015-1229

net/http/proxyclientsocket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 aka Proxy Authentication Required HTTP status code accompanied by a Set-Cookie header, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response...

6.1AI score0.00317EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2013/04/20 12:0 a.m.30 views

Mandriva Linux Security Advisory : stunnel (MDVSA-2013:130)

Updated stunnel packages fix security vulnerability : stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a...

6.6CVSS8.5AI score0.0201EPSS
Exploits0References2
Cvelist
Cvelist
added 2013/03/08 6:0 p.m.13 views

CVE-2013-1762

stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow...

7.6AI score0.0201EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2009/08/07 12:0 a.m.37 views

Mozilla Firefox SOCKS5 Proxy Server DoS Vulnerability (Aug 2009) - Windows

Mozilla Firefox is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.4AI score0.0266EPSS
Exploits0References3
Rows per page
Query Builder