CVE-2019-5314

Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...

Crlf injection

Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...

CVE-2019-5314

Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...

CVE-2019-5314

CVE-2019-5314 concerns ArubaOS web components vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. The public descriptions state an attacker could trigger this by sending specific URL parameters. The connected records confirm affected software class (ArubaOS) and the underlyi...

CVE-2019-5314: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...

PT-2019-17576

Name of the Vulnerable Software and Affected Versions ArubaOS affected versions not specified Description The issue concerns certain web components in the software that are susceptible to HTTP Response splitting CRLF injection and Reflected XSS. An attacker could exploit this by sending specific...

ruby, rubygem, rubygems security update

CentOS Errata and Security Advisory CESA-2019:2028 An update for ruby is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CentOS 7 : ruby (CESA-2019:2028)

An update for ruby is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Amazon Linux 2 : ruby (ALAS-2019-1276)

It was found that WEBrick could be forced to use an excessive amount of memory during the processing of HTTP requests, leading to a Denial of Service. An attacker could use this flaw to send huge requests to a WEBrick application, resulting in the server running out of memory. CVE-2018-8777 It wa...

CVE-2015-9345

The link-log plugin before 2.0 for WordPress has HTTP Response Splitting...

Design/Logic Flaw

The link-log plugin before 2.0 for WordPress has HTTP Response Splitting...

CVE-2015-9345

The link-log plugin before 2.0 for WordPress has HTTP Response Splitting...

CVE-2015-9345

CVE-2015-9345 concerns the WordPress plugin Link Log, where versions before 2.0 expose a vulnerability due to HTTP Response Splitting. The affected component is the Link Log plugin for WordPress; the root cause is improper handling/validation of input during command/log construction, enabling hea...

CVE-2015-9345

The link-log plugin before 2.0 for WordPress has HTTP Response Splitting...

CVE-2015-9345: Improper Input Validation

The link-log plugin before 2.0 for WordPress has HTTP Response Splitting...

PT-2019-7304

Name of the Vulnerable Software and Affected Versions link-log plugin versions prior to 2.0 Description The issue affects the link-log plugin for WordPress, allowing for HTTP Response Splitting. Recommendations For versions prior to 2.0, update to version 2.0 or later to resolve the issue...

Scientific Linux Security Update : ruby on SL7.x x86_64 (20190806)

Security Fixes : - ruby: HTTP response splitting in WEBrick CVE-2017-17742 - ruby: DoS by large request in WEBrick CVE-2018-8777 - ruby: Buffer under-read in Stringunpack CVE-2018-8778 - ruby: Unintentional directory traversal by poisoned NULL byte in Dir CVE-2018-8780 - ruby: Tainted flags are n...

RHEL 7 : ruby (RHSA-2019:2028)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2028 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

ruby: HTTP response splitting in WEBrick

It was found that WEBrick did not sanitize headers sent back to clients, resulting in a response-splitting vulnerability. An attacker, able to control the server's headers, could force WEBrick into injecting additional headers to a client...

Moderate: Red Hat Security Advisory: ruby security update

An update for ruby is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...