CVE-2020-1177

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1183, CVE-2020-1297, CVE-2020-1298...

CVE-2019-0982

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'...

Cisco IOS和Cisco IOS XE 安全漏洞

Cisco IOS and Cisco IOS XE are both products of Cisco, Inc.Cisco IOS is a suite of operating systems developed for its network devices.Cisco IOS XE is a single operating system. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE...

TRENDnet TEW-637AP和TRENDnet TEW-638APB 安全漏洞

The TRENDnet TEW-637AP and TRENDnet TEW-638APB are both a wireless access point from Trendnet, Inc. A security vulnerability exists in TRENDnet TEW-637AP and TRENDnet TEW-638APB versions 1.2.7 and 1.3.0.106, which stems from a null pointer dereference issue in the HTTP request processing componen...

Ubuntu 14.04 LTS : Salt vulnerability (USN-7181-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7181-1 advisory. It was discovered that Salt incorrectly handled web requests when the SSH client was enabled. An attacker could possibly use this issue to achieve remote code...

USN-7165-1: Spring Framework vulnerability

It was discovered that the Spring Framework incorrectly handled web requests via data binding. An attacker could possibly use this issue to achieve remote code execution and obtain sensitive information...

The vulnerability of the Loway QueueMetrics software for analyzing call center efficiency metrics lies in its lack of proper HTTP request processing capabilities. This allows attackers to circumvent existing security restrictions.

The vulnerability of the Loway QueueMetrics performance analysis software relates to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and carry out an “HTTP request hijacking” attack...

The vulnerability in the implementation of HTTP request processing functions of Zyxel switch microprogramming systems series GS1350, GS1915, GS1920, GS2220 allows a perpetrator to cause service interruptions.

The vulnerability of the HTTP request processing function implemented in Zyxel switch microprogramming devices of the GS1350, GS1915, GS1920, and GS2220 series is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow attackers to cause service failures...

Zyxel GS1920 代码问题漏洞

The Zyxel GS1920 is a switch from China Hopkins Zyxel. A code issue vulnerability exists in versions prior to Zyxel GS1920-24v2 V4.70ABMH.8C0, which stems from a failure to properly check for exceptions or anomalies in the HTTP request processing function, which could allow an unauthenticated...

The vulnerability of the WSGI Micro-Framework configuration, Bottle, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the WSGI Micro-Framework “Bottle” is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability in the web interface for managing microprogramming software on Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W routers allows a perpetrator to execute arbitrary code.

The vulnerability of the web-based management interfaces for Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W microprogramming systems lies in HTTP request processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2021-22293

Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Affected product versions include: CampusInsight versions V100R019C10; ManageOne versions 6.5.1.1, 6.5.1.SPC100, 6.5.1.SPC200, 6.5.1RC1,...

squid: Improper input validation in URI processor

An issue was discovered in Squid before 4.9. When handling a URN request, a corresponding HTTP request is made. This HTTP request doesn't go through the access checks that incoming HTTP requests go through. This causes all access checks to be bypassed and allows access to restricted HTTP servers,...

Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2020-57801)

Microsoft ASP.NET Core is a framework of cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web applications, Internet of Things applications, and mobile backends. A denial of service vulnerability exists in the Microsoft ASP.NET...

The vulnerability of the .NET Core software platform, related to errors in handling web requests, allows attackers to trigger a service failure.

The vulnerability of the .NET Core software platform is related to errors in handling web requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2019-3660

Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests...

The vulnerability of the ASP.NET Core software platform, related to errors in handling web requests, allows attackers to cause service failures.

The vulnerability of the ASP.NET Core software platform is related to errors in handling web requests. Exploiting this vulnerability can allow an attacker to cause service interruptions through specially crafted web requests...

The vulnerability of the Microsoft .NET Framework software lies in errors related to the handling of specific web requests, which allows a hacker to cause a service failure.

The vulnerability of the Microsoft .NET Framework software platform is related to errors in the mechanism for processing special web requests. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially crafted request...

Micro Focus Enterprise Developer Denial of Service Vulnerability

Micro Focus Enterprise Developer and Enterprise Server are both products of Micro Focus, a British company. micro Focus Enterprise Developer is a set of integrated development environments for the mainframe. enterprise Server is a set of Enterprise Server is a production deployment platform for...

CVE-2018-8159

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests, aka "Microsoft Exchange Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server...