EUVD-2015-0013

Malware in sbrugna...

CVE-2015-7519

agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof headers passed to applications by using an underscore character instead of a -...

PT-2016-3800

Name of the Vulnerable Software and Affected Versions Phusion Passenger versions prior to 4.0.60 Phusion Passenger versions 5.0.x prior to 5.0.22 Description The issue allows remote attackers to spoof headers passed to applications by using an underscore character instead of a - dash character in...

CVE-2015-0219: Undefined Security Weakness

Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an underscore character instead of a - dash character in an HTTP header, as demonstrated by an X-AuthUser header...

CVE-2004-0957: Undefined Security Weakness

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "" underscore, grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities...