Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 10:04:20 +0000 bdu:2019-02074 https://cve.radiocsirt.org/vuln/bdu:2019-02074 bdu:2019-02074 https://cve.radiocsirt.org/vuln/bdu:2019-02074 EUVD-2026-53204 https://cve.radiocsirt.org/vuln/euvd-2026-53204 EUVD-2026-53204 https://cve.radiocsirt.org/vuln/euvd-2026-53204 fkie_cve-2019-9900 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9900 <p>When parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero characters (NUL, ASCII 0x0). This allows remote attackers crafting header values containing embedded NUL characters to potentially bypass header matching rules, gaining access to unauthorized resources.</p> <p>When parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero characters (NUL, ASCII 0x0). This allows remote attackers crafting header values containing embedded NUL characters to potentially bypass header matching rules, gaining access to unauthorized resources.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9900 GHSA-h9r7-c397-3wqr https://cve.radiocsirt.org/vuln/ghsa-h9r7-c397-3wqr <p>When parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero characters (NUL, ASCII 0x0). This allows remote attackers crafting header values containing embedded NUL characters to potentially bypass header matching rules, gaining access to unauthorized resources.</p> <p>When parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero characters (NUL, ASCII 0x0). This allows remote attackers crafting header values containing embedded NUL characters to potentially bypass header matching rules, gaining access to unauthorized resources.</p> https://cve.radiocsirt.org/vuln/ghsa-h9r7-c397-3wqr gsd-2019-9900 https://cve.radiocsirt.org/vuln/gsd-2019-9900 gsd-2019-9900 https://cve.radiocsirt.org/vuln/gsd-2019-9900 RHSA-2019:0741 — Red Hat Security Advisory: Istio-Proxy Security Update https://cve.radiocsirt.org/vuln/rhsa-2019:0741 <p>istio/envoy: Authorization bypass via null characters injection in HTTP/1.x istio/envoy: Path traversal via URL Patch manipulation in HTTP/1.x header</p> <p>istio/envoy: Authorization bypass via null characters injection in HTTP/1.x istio/envoy: Path traversal via URL Patch manipulation in HTTP/1.x header</p> https://cve.radiocsirt.org/vuln/rhsa-2019:0741