https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:17:41 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-02508 cnvd-2016-02508 https://cve.radiocsirt.org/vuln/cnvd-2016-02508 https://cve.radiocsirt.org/vuln/euvd-2026-95982 EUVD-2026-95982 https://cve.radiocsirt.org/vuln/euvd-2026-95982 https://cve.radiocsirt.org/vuln/fkie_cve-2015-8852 <p>Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r (carriage return) character in conjunction with multiple Content-Length headers in an HTTP request.</p> <p>Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r (carriage return) character in conjunction with multiple Content-Length headers in an HTTP request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-8852 https://cve.radiocsirt.org/vuln/ghsa-rgw4-jfff-qx3m <p>Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r (carriage return) character in conjunction with multiple Content-Length headers in an HTTP request.</p> <p>Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r (carriage return) character in conjunction with multiple Content-Length headers in an HTTP request.</p> https://cve.radiocsirt.org/vuln/ghsa-rgw4-jfff-qx3m https://cve.radiocsirt.org/vuln/gsd-2015-8852 gsd-2015-8852 https://cve.radiocsirt.org/vuln/gsd-2015-8852 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-8852 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: varnish</p> <p>Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r (carriage return) character in conjunction with multiple Content-Length headers in an HTTP request.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: varnish</p> <p>Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r (carriage return) character in conjunction with multiple Content-Length headers in an HTTP request.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-8852