The vulnerability of the library for creating Spring Cloud Gateway API gateways, related to deficiencies in generating HTTP requests, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the library used to create Spring Cloud Gateway API gateways is related to deficiencies in generating HTTP requests. Exploiting this vulnerability allows a malicious actor to redirect the X-Forwarded-For and Forwarded headers from untrusted proxy servers...

CVE-2023-46839

A vulnerability exists in the Xen hypervisor involving the phantom() function. When PCI devices use phantom functions to generate requests from unpopulated IDs, the system may fail to properly set up the required IOMMU context . Because this failure is not fatal, a primary device might be assigne...

SUSE CVE-2013-1710

The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting XSS attacks...

The vulnerability of Websoft HCM’s automation software for HR processes stems from improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the generation of HTTP requests...

The vulnerability of the Firefox browser, which allows a malicious actor to trigger a service failure

Mozilla Firefox browser contains a vulnerability related to errors in the implementation of a certain type of key verification mechanism in the crypto.generateCRMFRequest method. Exploiting this vulnerability allows malicious actors, operating remotely, to cause a service failure abnormal...

CVE-2013-1710

The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting XSS attacks...