NA - CVE-2023-38522 - Apache Traffic Server accepts characters that...
Apache Traffic Server accepts characters that are not allowed for HTTP field names and forwards malformed requests to origin servers. This can be utilized for request smuggling and may also lead...
NA - CVE-2024-35161 - Apache Traffic Server forwards malformed HTTP...
Apache Traffic Server forwards malformed HTTP chunked trailer section to origin servers. This can be utilized for request smuggling and may also lead cache poisoning if the origin servers are...
NA - CVE-2024-35296 - Invalid Accept-Encoding header can cause Apache...
Invalid Accept-Encoding header can cause Apache Traffic Server to fail cache lookup and force forwarding requests. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.10, from 9.0.0...
NA - CVE-2024-41684 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing secure flag for the session cookies associated with the router's web management interface. An attacker with...
NA - CVE-2024-41685 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session cookies associated with the router's web management interface. An attacker with...
NA - CVE-2024-41686 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could exploit this by creating password that do not adhere to...
NA - CVE-2024-41687 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to transmission of password in plain text. A remote attacker could exploit this vulnerability by intercepting transmission within...
NA - CVE-2024-41688 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due lack of encryption in storing of usernames and passwords within the router's firmware/ database. An attacker with physical...
NA - CVE-2024-41689 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's firmware/ database. An attacker with physical access...
NA - CVE-2024-41690 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of default username and password credentials in plaintext within the router's firmware/ database. An attacker...