ANGLE Component Confidential Data Access

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...

OTP Library HTTP Request Handling

The vulnerability of theOTP library in the Erlang programming language is related to deficiencies in handling http requests. Exploiting this vulnerability allows a malicious actor to carry out attacks by replacing HTTP requests...

EUVD-2018-19823

Malware in sbrugna...

EUVD-2022-2160

Malicious code in bioql PyPI...

BIT-POWERSHELL-2020-1108 .NET Core & .NET Framework Denial of Service Vulnerability

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely,...

USN-7181-1 salt vulnerability

It was discovered that Salt incorrectly handled web requests when the SSH client was enabled. An attacker could possibly use this issue to achieve remote code execution or obtain sensitive information...

Cisco IOS XE Software security vulnerabilities

Cisco IOS XE Software is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software that originates from...

CVE-2019-0869

A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'...

Cisco RV180W Multi-functional Router Disclosure Information

The vulnerability in the code of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W wireless network security gateway lies in improper cleaning of data entered by users in HTTP requests. Exploiting this vulnerability allows a malicious actor to...

CVE-2018-8153

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests, aka "Microsoft Exchange Spoofing Vulnerability." This affects Microsoft Exchange Server...

Microsoft Exchange Server Elevation of Privilege Vulnerability (CNVD-2018-10430)

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A power-up vulnerability exists in Microsoft Exchange Server, which stems from the program's failure to properly handle Web...

CVE-2018-0864

CVE-2018-0864 affects SharePoint Project Server 2013 and SharePoint Enterprise Server 2016. The root cause is improper sanitization of crafted web requests, leading to information disclosure and potential privilege abuse. The issue is addressed by Microsoft security updates KB4011680 (SharePoint ...