Search for packages
| purl | pkg:deb/debian/pound@2.0-1.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4mqa-bkha-kbaj
Aliases: CVE-2012-4929 |
security update |
Affected by 5 other vulnerabilities. Affected by 5 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
VCID-9pjk-kxgp-h7hc
Aliases: CVE-2016-10711 |
Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751. |
Affected by 0 other vulnerabilities. |
|
VCID-drv6-nz1y-ffdr
Aliases: CVE-2018-21245 |
Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711. |
Affected by 0 other vulnerabilities. |
|
VCID-e1yx-dxa6-1bba
Aliases: CVE-2011-3389 |
Multiple vulnerabilities have been found in the Oracle JRE/JDK, allowing attackers to cause unspecified impact. |
Affected by 5 other vulnerabilities. |
|
VCID-jau7-gfz8-dkfa
Aliases: CVE-2009-3555 GHSA-f7w7-6pjc-wwm6 VU#120541 |
The renegotiation vulnerability in SSL protocol |
Affected by 5 other vulnerabilities. Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-xap5-djda-2uem
Aliases: CVE-2014-3566 |
Multiple vulnerabilities have been found in Oracle JRE/JDK, allowing both local and remote attackers to compromise various Java components. |
Affected by 5 other vulnerabilities. Affected by 5 other vulnerabilities. Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-5dgw-xn7k-77br | Pound is vulnerable to HTTP request smuggling, which could be exploited to bypass security restrictions or poison web caches. |
CVE-2005-3751
|
| VCID-hy5s-zgt5-wfch | Pound is vulnerable to a buffer overflow that could lead to the remote execution of arbitrary code. |
CVE-2005-1391
|