Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 13:03:44 +0000 certa-2013-avi-333 — Une vulnérabilité a été corrigée dans <span class="textit">IBM WebSphere</span>. Elle permet à un attaquant de provoque… https://cve.radiocsirt.org/vuln/certa-2013-avi-333 certa-2013-avi-333 https://cve.radiocsirt.org/vuln/certa-2013-avi-333 EUVD-2026-106406 https://cve.radiocsirt.org/vuln/euvd-2026-106406 EUVD-2026-106406 https://cve.radiocsirt.org/vuln/euvd-2026-106406 fkie_cve-2013-2950 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2950 <p>CRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before 6.1.5 CF26, 7.0.0.x before 7.0.0.2 CF21, and 8.0.0.x through 8.0.0.1 CF5, when home substitution (aka uri.home.substitution) is enabled, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.</p> <p>CRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before 6.1.5 CF26, 7.0.0.x before 7.0.0.2 CF21, and 8.0.0.x through 8.0.0.1 CF5, when home substitution (aka uri.home.substitution) is enabled, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-2950 GHSA-7jfq-mvq9-hxph https://cve.radiocsirt.org/vuln/ghsa-7jfq-mvq9-hxph <p>CRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before 6.1.5 CF26, 7.0.0.x before 7.0.0.2 CF21, and 8.0.0.x through 8.0.0.1 CF5, when home substitution (aka uri.home.substitution) is enabled, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.</p> <p>CRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before 6.1.5 CF26, 7.0.0.x before 7.0.0.2 CF21, and 8.0.0.x through 8.0.0.1 CF5, when home substitution (aka uri.home.substitution) is enabled, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-7jfq-mvq9-hxph gsd-2013-2950 https://cve.radiocsirt.org/vuln/gsd-2013-2950 gsd-2013-2950 https://cve.radiocsirt.org/vuln/gsd-2013-2950