The vulnerability of the HTTP Daemon server relates to inconsistent interpretation of HTTP requests, allowing attackers to exploit their privileges.

The vulnerability of the HTTP Daemon is related to the inconsistent interpretation of HTTP requests when processing the 'Content-Length' header value. Exploiting this vulnerability allows a remote attacker to enhance their privileges by sending specially crafted hidden HTTP requests HTTP Request...

The vulnerability of the WSGI server for Python Waitress, related to HTTP request processing flaws, allows attackers to compromise data integrity.

The vulnerability of the WSGI server for Python Waitress is related to the uncertainty in recognizing a single LF character as a line feed. Exploiting this vulnerability allows an attacker to compromise data integrity...

CVE-2022-40075

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formfastsettingwifiset...

CVE-2022-40067

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer...

CVE-2022-40074

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi...

CVE-2022-40068

Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand...

Tenda AC21 缓冲区错误漏洞

The Tenda AC21 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC21 version V16.03.08.15, which stems from the lack of length checking of input data in the fromSetWifiGusetBasic function of /bin/httpd, which can be exploited to cause httpd to...

PT-2022-25185 · Tenda · Tenda Ac21

Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow vulnerability via /bin/httpd, specifically affecting the formSetDeviceName. Recommendations: For Tenda AC21 version 16.03.08.15, consider disabling access t...

Tenda AC21 缓冲区错误漏洞

The Tenda AC21 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC21 version V16.03.08.15, which originates from a lack of length checking of input data in the formSetFirewallCfg function of /bin/httpd, which can be exploited to cause httpd to...

CVE-2022-38829

Tenda RX9Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg...

CVE-2022-2863

The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack...

TIBCO Security Advisory: September 21, 2022 - TIBCO EBX Add-ons -CVE-2022-30578

TIBCO EBX Add-ons Stored XSS vulnerability Original release date: September 21, 2022 Lastrevised: --- CVE-2022-30578 Source: TIBCOSoftware Inc. Products Affected TIBCO EBX Add-ons versions 5.4.1 and below The following component is affected: Web Server Description The component listed above...

TIBCO Security Advisory: September 21, 2022 - TIBCO EBX -CVE-2022-30577

TIBCO EBX Stored XSS vulnerability Original release date: September 21, 2022 Lastrevised: --- CVE-2022-30577 Source: TIBCOSoftware Inc. Products Affected TIBCO EBX versions 6.0.0 through 6.0.8 The following component is affected: Web Server Description The component listed above contains an easil...

TIBCO Security Advisory: September 21, 2022 - TIBCO EBX -CVE-2022-30577

TIBCO EBX Stored XSS vulnerability Original release date: September 21, 2022 Lastrevised: --- CVE-2022-30577 Source: TIBCOSoftware Inc. Products Affected TIBCO EBX versions 6.0.0 through 6.0.8 The following component is affected: Web Server Description The component listed above contains an easil...

CVE-2022-37724

Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces...

CVE-2022-37724

Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces...

CVE-2022-37724

Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces...

CLSA-2022-1663184406 Fix CVE(s): CVE-2021-28861

SECURITY UPDATE: Redirection vulnerability in http.server - debian/patches/CVE-2021-28861.patch: Fix an open redirection vulnerability in the http.server module when an URI path starts with //. - CVE-2021-28861...

CLSA-2022-1663183291 Fixed CVE-2021-28861 in python3

CVE-2021-28861: fix redirection vulnerability in http.server - fix tests to be compatible with expat 2.2.5...

The vulnerability of the WSGI server for Python Waitress allows attackers to compromise data integrity.

The vulnerability of the WSGI server for Python Waitress is related to an incorrect analysis of the Transfer-Encoding header. Exploiting this vulnerability allows a remote attacker to compromise data integrity...