Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2015-5245 | Ceph up to 0.94.3 Object Gateway HTTP Response Splitting response splitting (RHSA-2015:2066 / BID-85388)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability has been found in Ceph up to 0.94.3 and classified as critical. This vulnerability affects unknown code of the component Object Gateway. The manipulation leads to http response splitting (HTTP Response Splitting). This vulnerability was named CVE-2015-5245. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ Ceph 15.2.0/15.2.1 ceph-mon/ceph-mgr improper authorization


📈 46.28 Punkte
🕵️ Sicherheitslücken

🕵️ Kaazing Gateway/Gateway JMS Edition 4.0.2/4.0.3/4.0.4 WebSocket HTTP Request Response Splitting information disclosure


📈 42.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2016-5699 | CPython up to 2.7.9/3.4.3 HTTP Header HTTPConnectionputheader response splitting (RHSA-2016:1626 / Nessus ID 93038)


📈 36.98 Punkte
🕵️ Sicherheitslücken

🕵️ Red Hat Ceph Storage RadosGW 3.x/4.x CORS ExposeHeader Tag Header Injection response splitting


📈 36.56 Punkte
🕵️ Sicherheitslücken

🕵️ Ceph 1.3.x Object Gateway HTTP Requests CORS denial of service


📈 36.32 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2016-5325 | Node.js up to 0.10.46/0.12.15/4.5.x/6.6.x ServerResponse#writeHead reason Split response splitting (RHSA-2016:2101 / Nessus ID 94002)


📈 34.22 Punkte
🕵️ Sicherheitslücken

🕵️ Red Hat Ceph up to 0.94.9-7 Object Gateway POST Request denial of service


📈 33.56 Punkte
🕵️ Sicherheitslücken

🕵️ Ceph Object Gateway S3 Request cross site scripting


📈 33.56 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-16771 | Armeria up to 0.96.0 HTTP Response response splitting


📈 32.03 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-6181 | SAP NetWeaver up to 754 HTTP Response Header response splitting


📈 32.03 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-5247 | Puma Gem up to 3.12.1/4.3.1 on Ruby Header HTTP Response response splitting (GHSA-84j7-475p-hp8v)


📈 32.03 Punkte
🕵️ Sicherheitslücken

🕵️ Low CVE-2020-25677: CEPH Ceph-ansible


📈 31.99 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-44466 | Linux Kernel up to 6.4.4 Ceph File System net/ceph/messenger_v2.c buffer overflow (GHSA-jg27-jx6w-xwph)


📈 31.99 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2016-0359 | IBM WebSphere Application Server 7.0/8.0/8.5/8.5.5 HTTP Response Splitting crlf injection (Nessus ID 92724 / BID-91484)


📈 31.71 Punkte
🕵️ Sicherheitslücken

🕵️ Modicon M340, Premium, Quantum PLCs and BMXNOR0200 Embedded Web Server HTTP Response Response Splitting privilege escalation


📈 30.88 Punkte
🕵️ Sicherheitslücken

🕵️ uvicorn httptools Parser HTTP Response response splitting


📈 30.88 Punkte
🕵️ Sicherheitslücken

🕵️ Red Hat Ceph Storage 2/3 ceph-isci-cli /usr/bin/rbd-target-api debug=True privilege escalation


📈 30.85 Punkte
🕵️ Sicherheitslücken

📰 heise-Angebot: Mehr über Ceph lernen: Ceph Day bildet Abschluss der storage2day 2020


📈 30.85 Punkte
📰 IT Nachrichten

🕵️ Bugtraq: Computer Associates API Gateway CRLF Response Splitting, Directory Traversal vulnerabilities


📈 30.21 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2016-2571 | Squid Proxy up to 3.5.14/4.0.6 Response http.cc input validation (RHSA-2016:2600 / BID-83406)


📈 29.52 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-1551 | Mozilla Firefox up to 122 Response Header Set-Cookie response splitting (DLA 3747-1)


📈 29.27 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2016-6839 | Huawei FusionAccess prior V100R006C00 response splitting (sa-20160817-01 / BID-92502)


📈 28.95 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2016-5009 | Ceph mon/Monitor.cc handle_command input validation (RHSA-2016:1384 / Nessus ID 95976)


📈 28.52 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-24919 | Check Point Quantum Gateway/Spark Gateway/CloudGuard Network Check Point Quantum Gateway up to R81 Remote Access VPN information disclosure


📈 28.37 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-44108 | pdftojson 94204bb Object.cc Object::copy(Object*) stack-based overflow


📈 28.33 Punkte
🕵️ Sicherheitslücken

🕵️ Internet Bug Bounty: Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting (CVE-2023-27522)


📈 27.79 Punkte
🕵️ Sicherheitslücken

🕵️ Internet Bug Bounty: moderate: Apache HTTP Server: HTTP response splitting (CVE-2023-38709)


📈 27.79 Punkte
🕵️ Sicherheitslücken

🔧 Why JavaScript Says "[object Object]" and Not Just "[object]" 🤔


📈 27.18 Punkte
🔧 Programmierung

🕵️ Apache HTTP Server up to 2.2.31/2.4.23 mod_userdir HTTP Response Splitting privilege escalation


📈 26.64 Punkte
🕵️ Sicherheitslücken

📰 Apache HTTP Server: Mehrere Schwachstellen ermöglichen HTTP Response Splitting


📈 26.64 Punkte
🐧 Unix Server

🪟 Apache HTTP Server: Mehrere Schwachstellen ermöglichen HTTP Response Splitting


📈 26.64 Punkte
🪟 Windows Server

🪟 Apache HTTP Server: Mehrere Schwachstellen ermöglichen HTTP Response Splitting


📈 26.64 Punkte
🪟 Windows Server

📰 Apache HTTP Server: Mehrere Schwachstellen ermöglichen HTTP Response Splitting


📈 26.64 Punkte
🐧 Unix Server

📰 Apache HTTP Server: Mehrere Schwachstellen ermöglichen HTTP Response Splitting


📈 26.64 Punkte
🐧 Unix Server

📰 Apache HTTP Server gefährdet: Mehrere Schwachstellen ermöglichen HTTP Response Splitting


📈 26.64 Punkte
🐧 Unix Server

matomo
•