https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:47:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-02041 bdu:2020-02041 https://cve.radiocsirt.org/vuln/bdu:2020-02041 https://cve.radiocsirt.org/vuln/certfr-2020-avi-194 certfr-2020-avi-194 https://cve.radiocsirt.org/vuln/certfr-2020-avi-194 https://cve.radiocsirt.org/vuln/cnvd-2019-43668 cnvd-2019-43668 https://cve.radiocsirt.org/vuln/cnvd-2019-43668 https://cve.radiocsirt.org/vuln/euvd-2026-59225 EUVD-2026-59225 https://cve.radiocsirt.org/vuln/euvd-2026-59225 https://cve.radiocsirt.org/vuln/fkie_cve-2019-19330 <p>The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.</p> <p>The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-19330 https://cve.radiocsirt.org/vuln/ghsa-x4px-pm9c-vmjm <p>The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.</p> <p>The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-x4px-pm9c-vmjm https://cve.radiocsirt.org/vuln/gsd-2019-19330 gsd-2019-19330 https://cve.radiocsirt.org/vuln/gsd-2019-19330 https://cve.radiocsirt.org/vuln/rhsa-2020:1287 <p>haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated &#34;chunked&#34; value haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes</p> <p>haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated &#34;chunked&#34; value haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes</p> https://cve.radiocsirt.org/vuln/rhsa-2020:1287 https://cve.radiocsirt.org/vuln/rhsa-2020:1725 <p>haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated &#34;chunked&#34; value haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks</p> <p>haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated &#34;chunked&#34; value haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks</p> https://cve.radiocsirt.org/vuln/rhsa-2020:1725 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-19330 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: haproxy</p> <p>The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: haproxy</p> <p>The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-19330 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0054 <p>Ein Angreifer kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0054