Apsis

apsis

5 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-21245 1Apsis 1Pound Nov 21, 2024 Jun 15, 2020 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.
CVE-2016-10711 2Apsis Debian 2Debian Linux Pound Nov 21, 2024 Jan 29, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751.
CVE-2005-3751 1Apsis 1Pound Apr 16, 2026 Nov 22, 2005 N/A· v4 N/A· v3 4.3 MEDIUM· v2 HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-le...Show more HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers.Show less
CVE-2005-1391 1Apsis 1Pound Apr 16, 2026 May 3, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.
CVE-2004-2026 1Apsis 1Pound Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.