Pound@* Security Vulnerabilities and Issues — Pound@* CVE List

Lucene search

ApsisPound*

3 matches found

CVE•added 2018/01/29 8:29 p.m.•68 views

CVE-2016-10711

Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751.

9.8CVSS9.1AI score0.0177EPSS

CVE•added 2005/11/22 8:3 p.m.•51 views

CVE-2005-3751

HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers.

4.3CVSS9.1AI score0.0177EPSS

CVE•added 2020/06/15 5:15 p.m.•37 views

CVE-2018-21245

Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.

9.1CVSS9.2AI score0.01051EPSS