Filters

Apache Traffic ServerApache Traffic Server: Incomplete field name check allows request smuggling

7.5
First published (updated )

Apache Traffic ServerApache Traffic Server: Invalid Accept-Encoding can force forwarding requests

8.2
First published (updated )

Apache Traffic ServerApache Traffic Server: Incomplete check for chunked trailer section allows request smuggling

First published (updated )

Fedoraproject FedoraApache Traffic Server: Malformed http/2 frames can cause an abort

7.5
First published (updated )

Apache Traffic ServerApache Traffic Server: s3_auth plugin problem with hash calculation

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Apache Tomcat- Rapid Reset HTTP/2 vulnerability

First published (updated )

Apache Traffic ServerApache Traffic Server: Differential fuzzing for HTTP request parsing discrepancies

First published (updated )

Apache Traffic ServerApache Traffic Server: Invalid Range header causes a crash

7.5
First published (updated )

Apache Traffic ServerInfoleak

7.5
First published (updated )

Debian Debian LinuxApache Traffic Server: Configuration option to block the PUSH method in ATS didn't work

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Apache Traffic ServerApache Traffic Server: The TRACE method can be use to disclose network information

7.5
First published (updated )

Apache Traffic ServerApache Traffic Server: Security issues with the xdebug plugin

First published (updated )

Apache Traffic ServerApache Traffic Server: Improperly reading the client requests

First published (updated )

Apache Traffic ServerApache Traffic Server: Improperly handled requests can cause crashes in specific plugins

7.5
First published (updated )

Apache Traffic ServerImproper HTTP/2 scheme and method validation

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Apache Traffic ServerImproper input validation on HTTP/2 headers

7.5
First published (updated )

Apache Traffic ServerTransfer-Encoding not treated as hop-by-hop

7.5
First published (updated )

Apache Traffic ServerProtocol vs scheme mismatch

7.5
First published (updated )

Apache Traffic ServerInsufficient Validation of HTTP/1.x Headers

7.5
First published (updated )

Apache Traffic ServerHTTP/2 framing vulnerabilities

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Debian Debian LinuxImproper authentication vulnerability in TLS origin verification

8.1
First published (updated )

Apache Traffic ServerHTTP request line fuzzing attacks

7.5
First published (updated )

Apache Traffic Serverheap-buffer-overflow with stats-over-http plugin

First published (updated )

Apache Traffic ServerATS stops accepting connections on FreeBSD

7.5
First published (updated )

Debian Debian LinuxNot validating origin TLS certificate

8.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Apache Traffic ServerRequest Smuggling - multiple attacks

7.5
First published (updated )

Apache Traffic ServerRequest Smuggling - transfer encoding validation

7.5
First published (updated )

Apache Traffic ServerRequest Smuggling - LF line ending

7.5
First published (updated )

Apache Traffic ServerDynamic stack buffer overflow in cachekey plugin

First published (updated )

Apache Traffic ServerReading HTTP/2 frames too many times

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Apache Traffic ServerSpecific sequence of HTTP/2 frames can cause ATS to crash

7.5
First published (updated )

Apache Traffic ServerHTTP Request Smuggling, content length with invalid charters

7.5
First published (updated )

Apache Traffic ServerIncorrect handling of url fragment leads to cache poisoning

7.5
First published (updated )

Apache Traffic ServerApache Traffic Server 9.0.0 is vulnerable to a remote DOS attack on the experimental Slicer plugin.

7.5
First published (updated )

Apache Traffic ServerThe ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgra…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Apache Traffic ServerATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled…

7.5
First published (updated )

Apache Traffic ServerApache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain t…

7.5
First published (updated )

Apache Traffic ServerApache ATS 6.0.0 to 6.2.3, 7.0.0 to 7.1.9, and 8.0.0 to 8.0.6 is vulnerable to a HTTP/2 slow read at…

7.5
First published (updated )

Apache Traffic ServerThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5…

First published (updated )

Apache Traffic ServerThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Apache Traffic ServerThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5…

First published (updated )

Apache Traffic ServerApache Traffic Server is vulnerable to HTTP/2 setting flood attacks. Earlier versions of Apache Traf…

7.5
First published (updated )

Nodejs Node.jsSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service

7.8
First published (updated )

redhat/jbcs-httpd24-httpdSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service

7.5
First published (updated )

Nodejs Node.jsSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service

7.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Nodejs Node.jsSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service

7.8
First published (updated )

F5 Big-ip Local Traffic ManagerSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service

7.8
First published (updated )

F5 Big-ip Local Traffic ManagerSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service

7.8
First published (updated )

Nodejs Node.jsSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service

7.8
First published (updated )

Nodejs Node.jsSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service

7.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203