Lucene search
+L

278 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/24 12:00 a.m.•6 views

CVE-2026-4742: Inconsistent Interpretation of HTTP Requests

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in visualfc liteide liteidex/src/3rdparty/qjsonrpc/src/http-parser modules. This vulnerability is associated with program files httpparser.C. This issue affects liteide: before x38.4...

6.3CVSS5.8AI score0.00215EPSS
SaveExploits0References1
Mend
Mend
•added 2026/03/12 7:33 p.m.•11 views

CVE-2026-32239

Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in...

6.5CVSS5.9AI score0.0022EPSS
SaveExploits0References7
Packet Storm News
Packet Storm News
•added 2026/03/03 12:00 a.m.•17 views

Multi-Agent Honeypot-Based Request-Response Context Dataset for Improved SQL Injection Detection Performance

SQL injection remains a major threat to web applications, as existing defenses often fail against obfuscation and evolving attacks because of neglecting the request-response context. This paper presents a context-enriched SQL injection detection framework, focusing on constructing a high-quality...

6AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2025/11/04 12:00 a.m.•20 views

Lighttpd 1.4.80 HTTP Request/Response Smuggling Vulnerability

Lighttpd is prone to an HTTP request/response smuggling vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.1CVSS5.8AI score0.00368EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2015-2260

Malware in sbrugna...

4.9CVSS6.8AI score0.00534EPSS
SaveExploits0References27
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2023-3324

Malicious code in bioql PyPI...

5.3CVSS5.9AI score0.00636EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2023-51294

Malicious code in bioql PyPI...

4.3CVSS5.4AI score0.00288EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2024-31913

Malicious code in bioql PyPI...

8.3CVSS6.6AI score0.00436EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2025/09/05 6:15 p.m.•16 views

DEBIAN-CVE-2025-39726

In the Linux kernel, the following vulnerability has been resolved: s390/ism: fix concurrency management in ismcmd The s390x ISM device data sheet clearly states that only one request-response sequence is allowable per ISM function at any point in time. Unfortunately as of today the s390/ism driv...

4.7CVSS6.4AI score0.00243EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/09/05 5:27 p.m.•15 views

CVE-2025-39726

In the Linux kernel, the following vulnerability has been resolved: s390/ism: fix concurrency management in ismcmd The s390x ISM device data sheet clearly states that only one request-response sequence is allowable per ISM function at any point in time. Unfortunately as of today the s390/ism driv...

4.7CVSS6.3AI score0.00243EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2025/03/27 6:01 p.m.•34 views

Pitchfork HTTP Request/Response Splitting vulnerability

Impact HTTP Response Header Injection in Pitchfork Versions 0.11.0 when used in conjunction with Rack 3 Patches The issue was fixed in Pitchfork release 0.11.0 Workarounds There are no known work arounds. Users must upgrade...

4.3CVSS5.4AI score0.00291EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2015-2756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - QEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command registers, which might allow local HVM guest users to cause a denial ...

4.9CVSS7.6AI score0.0045EPSS
SaveExploits0References2
Mend
Mend
•added 2025/03/03 8:48 a.m.•11 views

CVE-2025-1867

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in ithewei libhv allows HTTP Response Smuggling.This issue affects libhv: through 1.3.3...

10CVSS7.2AI score0.00385EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•9 views

CVE-2025-1867: Inconsistent Interpretation of HTTP Requests

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in ithewei libhv allows HTTP Response Smuggling.This issue affects libhv: through 1.3.3...

10CVSS7.3AI score0.00385EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/27 4:04 p.m.•33 views

CVE-2023-47159 IBM Sterling File Gateway information disclosure

IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses...

4.3CVSS0.00288EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•11 views

PT-2025-2727

Name of the Vulnerable Software and Affected Versions: Payara Server versions 4.1.151 through 4.1.2.191.51 Payara Server versions 5.20.0 through 5.70.0 Payara Server versions 5.2020.2 through 5.2022.5 Payara Server versions 6.2022.1 through 6.2024.12 Payara Server versions 6.0.0 through 6.21.0...

2.4CVSS7.1AI score0.00232EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/21 12:00 a.m.•10 views

CVE-2024-45687: Improper Neutralization of CRLF Sequences in HTTP Headers

Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting' vulnerability in Payara Platform Payara Server Grizzly, REST Management Interface modules, Payara Platform Payara Micro Grizzly modules allows Manipulating State, Identity Spoofing.This issue affects Payar...

2.4CVSS7.3AI score0.00232EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2024/12/16 2:38 a.m.•38 views

Important: Red Hat Security Advisory: squid security update

An update for squid is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.3CVSS7.1AI score0.07158EPSS
SaveExploits0References2
osv_bit
osv_bit
•added 2024/12/05 7:06 a.m.•196 views

BIT-HAPROXY-2024-53008

Inconsistent interpretation of HTTP requests 'HTTP Request/Response Smuggling' issue exists in HAProxy. If this vulnerability is exploited, a remote attacker may access a path that is restricted by ACL Access Control List set on the product. As a result, the attacker may obtain sensitive...

5.3CVSS5.9AI score0.01021EPSS
SaveExploits0References7
NVD
NVD
•added 2024/11/28 3:15 a.m.•38 views

CVE-2024-53008

Inconsistent interpretation of HTTP requests 'HTTP Request/Response Smuggling' issue exists in HAProxy. If this vulnerability is exploited, a remote attacker may access a path that is restricted by ACL Access Control List set on the product. As a result, the attacker may obtain sensitive...

5.3CVSS0.01021EPSS
SaveExploits0References6
Rows per page
Query Builder