Lucene search
K

36 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 4:13 a.m.2 views

SUSE CVE-2019-10097

In Apache HTTP Server 2.4.32-2.4.39, when modremoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted pro...

4.9CVSS8.1AI score0.52718EPSS
Exploits0References5
VulnCheck KEV
VulnCheck KEV
added 2022/02/22 12:0 a.m.2 views

VulnCheck KEV: CVE-2019-10097

In Apache HTTP Server 2.4.32-2.4.39, when modremoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted...

7.2CVSS6.9AI score0.52718EPSS
Exploits0References1
OSV
OSV
added 2022/02/04 2:15 a.m.1 views

CVE-2022-24150

Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the remoteIp parameter...

9.8CVSS6.1AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/04 2:15 a.m.4 views

CVE-2022-24150

Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the remoteIp parameter...

9.8CVSS7.6AI score0.02751EPSS
Exploits1References2
NVD
NVD
added 2022/02/04 2:15 a.m.19 views

CVE-2022-24150

Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the remoteIp parameter...

9.8CVSS0.02751EPSS
Exploits1References1
Prion
Prion
added 2022/02/04 2:15 a.m.20 views

Command injection

Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the remoteIp parameter...

7.5CVSS9.9AI score0.02751EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/02/04 1:33 a.m.19 views

CVE-2022-24150

Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the remoteIp parameter...

10AI score0.02751EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2020/11/04 1:44 a.m.3 views

httpd: null-pointer dereference in mod_remoteip

A vulnerability was discovered in Apache httpd, in modremoteip. A trusted proxy using the "PROXY" protocol could send specially crafted headers that can cause httpd to experience a stack buffer overflow or NULL pointer dereference, leading to a crash or other potential consequences. This issue...

7.2CVSS7.3AI score0.52718EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/04/06 7:9 p.m.4 views

httpd: null-pointer dereference in mod_remoteip

A vulnerability was discovered in Apache httpd, in modremoteip. A trusted proxy using the "PROXY" protocol could send specially crafted headers that can cause httpd to experience a stack buffer overflow or NULL pointer dereference, leading to a crash or other potential consequences. This issue...

7.2CVSS7.3AI score0.52718EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2019/12/10 7:59 a.m.3 views

httpd: null-pointer dereference in mod_remoteip

A vulnerability was discovered in Apache httpd, in modremoteip. A trusted proxy using the "PROXY" protocol could send specially crafted headers that can cause httpd to experience a stack buffer overflow or NULL pointer dereference, leading to a crash or other potential consequences. This issue...

7.2CVSS7.3AI score0.52718EPSS
Exploits0References5
OSV
OSV
added 2019/09/26 4:15 p.m.1 views

DEBIAN-CVE-2019-10097

In Apache HTTP Server 2.4.32-2.4.39, when modremoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted pro...

7.2CVSS6.7AI score0.52718EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2017/04/26 10:19 a.m.3 views

httpd: IP address spoofing when proxying using mod_remoteip and mod_rewrite

A flaw was found in the modremoteip module shipped with the httpd package. This flaw allows an attacker to spoof the IP address, resulting in the bypass of a modrewrite rule. The highest threat from this vulnerability is to integrity...

5.3CVSS6.6AI score0.06091EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2016/10/13 12:0 a.m.7 views

PT-2016-3323 · Apache +2 · Apache Http Server +2

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions prior to 2.4.24 Description: The issue is related to the implementation of mod remoteip and mod rewrite modules in the Apache HTTP Server, which is associated with insufficient authentication data verification. Thi...

8.1CVSS6.7AI score0.89744EPSS
Exploits10References62
Packet Storm
Packet Storm
added 2013/04/03 12:0 a.m.27 views

SmallFTPd 1.0.3 Denial Of Service

NoTrayIcon Region ; Directives created by AutoIt3WrapperGUI AutoIt3WrapperOutfile=aas.exe AutoIt3WrapperUseUpx=n AutoIt3WrapperChange2CUI=y EndRegion ; Directives created by AutoIt3WrapperGUI cs smallftpd 1.0.3.dos.au3 smallftpd 1.0.3 Denial Of Service Remote Crash exploit; This is simple exploit...

Exploits0
Exploit DB
Exploit DB
added 2013/04/03 12:0 a.m.24 views

SmallFTPd - Denial of Service

source: https://www.securityfocus.com/bid/58856/info SmallFTPD is prone to an unspecified denial-of-service vulnerability. A remote attacker can exploit this issue to crash the application resulting, in denial-of-service conditions. SmallFTPD 1.0.3 is vulnerable; other versions may also be...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2009/10/30 12:0 a.m.30 views

2wire Remote Denial of Service

======================================== 2WIRE REMOTE DENIAL OF SERVICE ======================================== Device: 2wire Gateway Router/Modem Vulnerable Software: = 5.29.52 Vulnerable Models: 1700HG 1701HG 1800HW 2071 2700HG 2701HG-T Release Date: 2009-10-29 Last Update: 2009-09 Critical:...

1.1AI score
Exploits0
Rows per page
Query Builder