Design/Logic Flaw

A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial "completion" context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contain...

CVE-2023-6393

CVE-2023-6393 affects the Quarkus Cache Runtime (quarkus-cache). The issue is a potential invalid reuse of context when a Uni cached with @CacheResult reuses the initial completion context, causing the processing to switch to the cached Uni instead of the request context. This can allow a POST re...

CVE-2023-6393

A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial "completion" context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contain...

HAProxy HTTP Request Processing

The vulnerability of the server software HAProxy is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise data integrity from a remote location...

CVE-2023-22382

Weak configuration in Automotive while VM is processing a listener request from TEE...

TP-Link Archer C50/C20/C2 Buffer Overflow

The vulnerability of the microprogrammed software of TP-Link Archer C50, Archer C20, and Archer C2 Wi-Fi routers lies in the fact that the operation data is written outside the buffer in memory when processing request parameters. Exploiting this vulnerability can allow a remote attacker to cause...

Node.js HTTP Request Hijacking

The vulnerability of the Node.js software platform is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to carry out an “HTTP request hijacking” attack...

SAP Web Dispatcher DoS

The vulnerability of SAP Web Dispatcher is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures...

PT-2023-5832 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 affected versions not specified Description: The vulnerability is related to a heap-based buffer overflow in the HTTP request processing referer of D-Link DIR-3040 routers. This issue allows network-adjacent attackers to execu...

CVE-2023-26436

Attackers with access to the "documentconverterws" API were able to inject serialized Java objects, that were not properly checked during deserialization. Access to this API endpoint is restricted to local networks by default. Arbitrary code could be injected that is being executed when processin...

ROS-20230620-03

A vulnerability in the HAProxy server software is related to a flaw in HTTP request processing. Exploitation of the vulnerability could allow an attacker acting remotely to execute a "smuggling of HTTP requests" attack...

WordPress Plugin Pinterest Automatic: Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. The WordPress Plugin Pinterest Automatic...

ABB eSOMS Disclosure Information

The vulnerability of the ABB eSOMS software for managing production processes is related to errors in processing requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information that is protected by the system...

Apache HTTP Server mod_proxy_uwsgi HTTP Request Hijacking

The vulnerability of the modproxyuwsgi component in the Apache HTTP Server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to carry out an “HTTP request hijacking” attack...

Fixed in Apache Tomcat 11.0.0-M3

Important: Apache Tomcat information disclosure CVE-2023-28708 When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Tomcat did not include the secure attribute. This could result in th...

K56331254: Apache HTTP server vulnerability CVE-2021-41524

Security Advisory Description While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No...

HAProxy HTTP Request Hijacking

The vulnerability of the server-side software HAProxy is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to carry out an “HTTP request hijacking” attack...

PT-2023-1414 · Zyxel · Zyxel Gs1915 +4

Name of the Vulnerable Software and Affected Versions: Zyxel GS1920-24v2 firmware versions prior to V4.70ABMH.8C0 Zyxel GS1350, GS1915, GS1920, GS2220 affected versions not specified Description: The issue is related to an improper check for unusual or exceptional conditions in the HTTP request...

CVE-2022-43393: Improper Check for Unusual or Exceptional Conditions

An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 firmware prior to V4.70ABMH.8C0, which could allow an unauthenticated attacker to corrupt the contents of the memory and result in a denial-of-service DoS condition on a vulnerable...

Apache Traffic Server code-related vulnerabilities

Apache Traffic Server ATS is a suite of scalable HTTP proxy and caching servers from the Apache Foundation in the United States. A code issue vulnerability exists in Apache Traffic Server versions 8.0.0 through 9.1.2 that stems from its handling of requests without checking for exceptions or...