SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SA…

An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions…

Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP …

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Cor…

Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the reque…

An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited t…

The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to …

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encount…

Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code…

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_pr…

NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as …

Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perf…

There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requ…

An active network attacker (MiTM) can achieve remote code execution on a machine that runs IKAR…

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadverten…

An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WE…

It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid…

It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers …

In Undertow 2.x before 2.0.0.Alpha2, 1.4.x before 1.4.17.Final, and 1.3.x before 1.3.31.Final, …

It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead…

An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smu…

Next.js is a React framework that can provide building blocks to create web applications. Prior…

React Router is a multi-strategy router for React bridging the gap from React 18 to React 19. T…

Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` requ…

A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX…