33 matches found
Malicious code in Be.Vlaanderen.Basisregisters.AspNеtCore.Mvc.Middlеware.AdԁVersionHeаder (NuGet)
--- -= Per source details. Do not edit below this line.=-...
PT-2024-2056 · Ibm · Ibm Cognos Command Center
Name of the Vulnerable Software and Affected Versions: IBM Cognos Command Center versions 10.2.4.1 through 10.2.5 Description: The issue is related to the exposure of information in the IBM Cognos Command Center, which could allow an attacker to obtain details about the application environment an...
PT-2024-21320 · Liferay · Liferay Dxp +1
Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.2.0 through 7.4.3.25 Liferay DXP 7.4 before update 26 Liferay DXP 7.3 before update 5 Liferay DXP 7.2 before fix pack 19 Description: The default value of the portal property http.header.version.verbosity is set to...
Security update for libslirp (moderate)
openSUSE Security Update: Security update for libslirp Announcement ID: openSUSE-SU-2022:2941-1 Rating: moderate References: 1187365 1201551 Cross-References: CVE-2021-3593 CVSS scores: CVE-2021-3593 NVD : 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N CVE-2021-3593 SUSE: 3.8...
OPENSUSE-SU-2022:2941-1 Security update for libslirp
This update for libslirp fixes the following issues: - CVE-2021-3593: Fixed invalid pointer initialization may lead to information disclosure udp6 bsc1187365. Non-security fixes: - Fix the version header bsc1201551...
SUSE-SU-2022:2941-1 Security update for libslirp
This update for libslirp fixes the following issues: - CVE-2021-3593: Fixed invalid pointer initialization may lead to information disclosure udp6 bsc1187365. Non-security fixes: - Fix the version header bsc1201551...
Cache Poisoning
find-my-way is vulnerable to web cache poisoning. The vulnerability exists when it accepts the Accept-Version header by default, and if the versioned routes are not used, it leads to a denial of serviceDoS...
Web Cache Poisoning
Overview Affected versions of this package are vulnerable to Web Cache Poisoning. It accepts the Accept-Version header by default, and if versioned routes are not being used, this could lead to a denial of service. Accept-Version can be used as an unkeyed header in a cache poisoning attack...
DEBIAN-CVE-2017-5488
Multiple cross-site scripting XSS vulnerabilities in wp-admin/update-core.php in WordPress before 4.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 version header of a plugin...
Malformed PDF Version Header
PDF files may include a malformed version header. A remote attacker may use such a header inside PDF files to evade IPS inspection, in order to avoid detection of attacks against various PDF vulnerabilities...
CVE-2005-3499
The CVE-2005-3499 entry describes a vulnerability in Frisk F-Prot Antivirus where remote attackers can bypass protection by supplying a ZIP file with a version header greater than 15. This prevents the antivirus from decompressing and analyzing the file. The connected documents confirm the affect...
