Vulnerabilities (CVE)

Filtered by CWE-86
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-38522 1 Apache 1 Traffic Server 2024-08-13 N/A 7.5 HIGH
Apache Traffic Server accepts characters that are not allowed for HTTP field names and forwards malformed requests to origin servers. This can be utilized for request smuggling and may also lead cache poisoning if the origin servers are vulnerable. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.10, from 9.0.0 through 9.2.4. Users are recommended to upgrade to version 8.1.11 or 9.2.5, which fixes the issue.
CVE-2024-21864 2024-07-03 N/A 7.8 HIGH
Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent network access.
CVE-2021-33158 2024-05-17 N/A 7.2 HIGH
Improper neutralization in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access.