DEBIAN-CVE-2017-7656

In Eclipse Jetty, versions 9.2.x and older, 9.3.x all configurations, and 9.4.x non-default configuration with RFC2616 compliance enabled, HTTP/0.9 is handled poorly. An HTTP/1 style request line i.e. method space URI space version that declares a version of HTTP/0.9 was accepted and treated as a...

The vulnerability of the iOS operating system and the Safari browser allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the WebKit JavaScript component of the iOS operating system and the Safari browser exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially...