#cwe-444

共收录 210 条相关情报。

← 返回所有主题

漏洞预警2026-07-31 发布INFO

HTTP Smuggling in cPanel allows potential leak of credentials.

CVE-2026-58047

HTTP Smuggling in cPanel allows potential leak of credentials.

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-07-29 发布INFO

undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry or resume of a partial resp...

CVE-2026-16728

undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-07-29 发布INFO

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 ...

CVE-2026-59898

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final,

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-07-29 发布INFO

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, Netty's HTTP/2-to-HTTP/1.x translation layer (`Http2Strea...

CVE-2026-59900

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final,

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-07-29 发布INFO

Apache Traffic Server truncates over-long header names, allowing header aliasing, request smuggling, and policy bypass. This issue affects Apache Traffic Server: from 8.0.0 thr...

CVE-2026-58155

Apache Traffic Server truncates over-long header names, allowing header aliasing, request smuggling, and policy bypass.

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-07-29 发布INFO

Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when converting HTTP/2 to HTTP/1. This issue affects Apache Traffic Serve...

CVE-2026-58153

Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when converting H

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-07-29 发布INFO

Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade request smuggling. This issue affects Apache Traffic Server: from 8.0.0 through 8...

CVE-2026-58150

Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade request smuggling. This

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-07-29 发布INFO

Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14,...

CVE-2026-57834

Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Ser

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

漏洞预警2026-07-29 发布INFO

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.0 t...

CVE-2026-24033

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Traffic Server.

历史摘要 · 未重新核验 · NVD

#cve #cwe-444

安全公告2026-07-28 发布INFO