https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:47:09 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07810 bdu:2023-07810 https://cve.radiocsirt.org/vuln/bdu:2023-07810 https://cve.radiocsirt.org/vuln/certfr-2020-avi-194 certfr-2020-avi-194 https://cve.radiocsirt.org/vuln/certfr-2020-avi-194 https://cve.radiocsirt.org/vuln/euvd-2026-58633 EUVD-2026-58633 https://cve.radiocsirt.org/vuln/euvd-2026-58633 https://cve.radiocsirt.org/vuln/fkie_cve-2019-18277 <p>A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the &#34;chunked&#34; value were not being correctly rejected. The impact was limited but if combined with the &#34;http-reuse always&#34; setting, it could be used to help construct an HTTP request smuggling attack against a vulnerable component employing a lenient parser that would ignore the content-length header as soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).</p> <p>A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the &#34;chunked&#34; value were not being correctly rejected. The impact was limited but if combined with the &#34;http-reuse always&#34; setting, it could be used to help construct an HTTP request smuggling attack against a vulnerable component employing a lenient parser that would ignore the content-length header as soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-18277 https://cve.radiocsirt.org/vuln/ghsa-7r84-r685-grmg <p>A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the &#34;chunked&#34; value were not being correctly rejected. The impact was limited but if combined with the &#34;http-reuse always&#34; setting, it could be used to help construct an HTTP request smuggling attack against a vulnerable component employing a lenient parser that would ignore the content-length header as soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).</p> <p>A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the &#34;chunked&#34; value were not being correctly rejected. The impact was limited but if combined with the &#34;http-reuse always&#34; setting, it could be used to help construct an HTTP request smuggling attack against a vulnerable component employing a lenient parser that would ignore the content-length header as soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).</p> https://cve.radiocsirt.org/vuln/ghsa-7r84-r685-grmg https://cve.radiocsirt.org/vuln/gsd-2019-18277 gsd-2019-18277 https://cve.radiocsirt.org/vuln/gsd-2019-18277 https://cve.radiocsirt.org/vuln/rhsa-2020:1287 <p>haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated &#34;chunked&#34; value haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes</p> <p>haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated &#34;chunked&#34; value haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes</p> https://cve.radiocsirt.org/vuln/rhsa-2020:1287 https://cve.radiocsirt.org/vuln/rhsa-2020:1725 <p>haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated &#34;chunked&#34; value haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks</p> <p>haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated &#34;chunked&#34; value haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks</p> https://cve.radiocsirt.org/vuln/rhsa-2020:1725 https://cve.radiocsirt.org/vuln/suse-su-2019:3288-1 <p>Security update for haproxy</p> <p>Security update for haproxy</p> https://cve.radiocsirt.org/vuln/suse-su-2019:3288-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-18277 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: haproxy, Ubuntu:18.04:LTS: haproxy</p> <p>A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the &#34;chunked&#34; value were not being correctly rejected. The impact was limited but if combined with the &#34;http-reuse always&#34; setting, it could be used to help construct an HTTP request smuggling attack against a vulnerable component employing a lenient parser that would ignore the content-length header as soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: haproxy, Ubuntu:18.04:LTS: haproxy</p> <p>A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the &#34;chunked&#34; value were not being correctly rejected. The impact was limited but if combined with the &#34;http-reuse always&#34; setting, it could be used to help construct an HTTP request smuggling attack against a vulnerable component employing a lenient parser that would ignore the content-length header as soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-18277 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0054 <p>Ein Angreifer kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0054