CWE-644 · 58 kayıt
Improper Neutralization of HTTP Headers for Scripting Syntax
Bu sınıftaki CVE’ler
58 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-47143İstismar yok | IBM Tivoli Application Dependency Discovery Manager HOST header injectionibm · tivoli application dependency discovery manager · CWE-644 | Kritik9,8 | — | %0,8 | 2 Şub 2024 |
39İzleyin | CVE-2024-39736İstismar yok | IBM Datacap Navigator HTTP HOST header injectionibm · datacap · CWE-644 | Kritik9,8 | — | %0,4 | 14 Tem 2024 |
39İzleyin | CVE-2025-52660İstismar yok | HCL AION is affected by an Host Header Injection vulnerabilityhcltech · aion · CWE-644 | Kritik9,8 | — | %0,3 | 19 Oca 2026 |
37İzleyin | CVE-2025-70948İstismar yok | A host header injection vulnerability in the mailer component of @perfood/couch-auth v0.26.0 allows attackers to obtain reset tokens and exeCWE-644 | Kritik9,3 | — | %0,4 | 5 Mar 2026 |
36İzleyin | CVE-2017-6031İstismar yok | A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0.certec edv gmbh · atvise scada · CWE-644 | Yüksek8,8 | — | %2,8 | 5 May 2017 |
36İzleyin | CVE-2026-26747İstismar yok | A Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP Host header in app/Providers/AppServicePromonicahq · monica · CWE-644 | Kritik9,1 | — | %0,6 | 20 Şub 2026 |
36İzleyin | CVE-2026-33805İstismar yok | @fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headersfastify · fastify\/http-proxy · CWE-644 | Kritik9,0 | — | %0,6 | 15 Nis 2026 |
35İzleyin | CVE-2020-6982İstismar yok | In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code exechoneywell · win-pak · CWE-644 | Yüksek8,8 | — | %1,1 | 24 Mar 2020 |
35İzleyin | CVE-2023-32465İstismar yok | Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability.dell · powerprotect cyber recovery · CWE-644 | Yüksek8,8 | — | %0,7 | 14 Haz 2023 |
34İzleyin | CVE-2025-64484İstismar yok | OAuth2-Proxy vulnerable to header smuggling via underscore, leading to potential privilege escalationoauth2-proxy · oauth2-proxy · CWE-644 | Yüksek8,5 | — | %0,6 | 10 Kas 2025 |
34İzleyin | CVE-2026-26234İstismar yok | JUNG Smart Visu Server - Improper Neutralization of HTTP Headers for Scripting Syntaxjung-group · smart visu server firmware · CWE-644 | Yüksek8,7 | — | %0,5 | 12 Şub 2026 |
34İzleyin | CVE-2025-64425İstismar yok | Coolify has host header injection in forgot passwordcoollabs · coolify · CWE-644 | Yüksek8,5 | — | %0,4 | 5 Oca 2026 |
32İzleyin | CVE-2026-33149Kavram kanıtı | Tandoor Recipes Vulnerable to Host Header Injectiontandoor · recipes · CWE-644 | Yüksek8,1 | — | %0,4 | 26 Mar 2026 |
31İzleyin | CVE-2021-21265İstismar yok | October CMS vulnerable to Potential Host Header Poisoning on misconfigured serversoctobercms · october · CWE-644 | Yüksek7,5 | — | %1,7 | 10 Mar 2021 |
31İzleyin | CVE-2026-67179İstismar yok | Genkit improper host header validationgenkit-ai · genkit · CWE-644 | Yüksek7,8 | — | %0,2 | 11 Ağu 2026 |
30İzleyin | CVE-2024-1064İstismar yok | Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4craftycontrol · crafty controller · CWE-644 | Yüksek7,5 | — | %0,8 | 3 Şub 2024 |
30İzleyin | CVE-2025-0154İstismar yok | IBM TXSeries for Multiplatforms information disclosureibm · txseries for multiplatforms · CWE-644 | Yüksek7,5 | — | %0,4 | 2 Nis 2025 |
28İzleyin | CVE-2023-36921İstismar yok | Header Injection in SAP Solution Manager (Diagnostic Agent)sap · solution manager · CWE-644 | Yüksek7,2 | — | %0,7 | 10 Tem 2023 |
27İzleyin | CVE-2025-13803İstismar yok | MediaCrush Header paths.py http headers for scripting syntaxCWE-644 | Orta6,9 | — | %0,3 | 30 Kas 2025 |
26İzleyin | CVE-2022-22399İstismar yok | IBM Aspera Faspex HTTP header injectionibm · aspera faspex · CWE-644 | Orta6,5 | — | %0,4 | 5 Mar 2024 |
26İzleyin | CVE-2026-0516İstismar yok | A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Hostsonicwall · sonicos · CWE-644 | Orta6,5 | — | %0,3 | 5 Ağu 2026 |
26İzleyin | CVE-2024-51451İstismar yok | Multiple Vulnerabilities in IBM Concert Softwareibm · concert · CWE-644 | Orta6,5 | — | %0,2 | 4 Şub 2026 |
26İzleyin | CVE-2025-14807İstismar yok | IBM InfoSphere Information Server is vulnerable to HTTP header injectionibm · infosphere information server · CWE-644 | Orta6,5 | — | %0,2 | 25 Mar 2026 |
26İzleyin | CVE-2025-27901İstismar yok | Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windowsibm · db2 recovery expert · CWE-644 | Orta6,5 | — | %0,2 | 17 Şub 2026 |
24İzleyin | CVE-2021-20784İstismar yok | HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote attacker to inject anvoidtools · everything · CWE-644 | Orta6,1 | — | %1,1 | 13 Tem 2021 |
- CVE-2023-4714339İzleyin
IBM Tivoli Application Dependency Discovery Manager HOST header injection
KritikCVSS 9,8İstismar yokEPSS %1ibm · tivoli application dependency discovery manager2 Şub 2024
- CVE-2024-3973639İzleyin
IBM Datacap Navigator HTTP HOST header injection
KritikCVSS 9,8İstismar yokEPSS %0ibm · datacap14 Tem 2024
- CVE-2025-5266039İzleyin
HCL AION is affected by an Host Header Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0hcltech · aion19 Oca 2026
- CVE-2025-7094837İzleyin
A host header injection vulnerability in the mailer component of @perfood/couch-auth v0.26.0 allows attackers to obtain reset tokens and exe
KritikCVSS 9,3İstismar yokEPSS %05 Mar 2026
- CVE-2017-603136İzleyin
A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0.
YüksekCVSS 8,8İstismar yokEPSS %3certec edv gmbh · atvise scada5 May 2017
- CVE-2026-2674736İzleyin
A Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP Host header in app/Providers/AppServicePro
KritikCVSS 9,1İstismar yokEPSS %1monicahq · monica20 Şub 2026
- CVE-2026-3380536İzleyin
@fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers
KritikCVSS 9,0İstismar yokEPSS %1fastify · fastify\/http-proxy15 Nis 2026
- CVE-2020-698235İzleyin
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code exec
YüksekCVSS 8,8İstismar yokEPSS %1honeywell · win-pak24 Mar 2020
- CVE-2023-3246535İzleyin
Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %1dell · powerprotect cyber recovery14 Haz 2023
- CVE-2025-6448434İzleyin
OAuth2-Proxy vulnerable to header smuggling via underscore, leading to potential privilege escalation
YüksekCVSS 8,5İstismar yokEPSS %1oauth2-proxy · oauth2-proxy10 Kas 2025
- CVE-2026-2623434İzleyin
JUNG Smart Visu Server - Improper Neutralization of HTTP Headers for Scripting Syntax
YüksekCVSS 8,7İstismar yokEPSS %1jung-group · smart visu server firmware12 Şub 2026
- CVE-2025-6442534İzleyin
Coolify has host header injection in forgot password
YüksekCVSS 8,5İstismar yokEPSS %0coollabs · coolify5 Oca 2026
- CVE-2026-3314932İzleyin
Tandoor Recipes Vulnerable to Host Header Injection
YüksekCVSS 8,1Kavram kanıtıEPSS %0tandoor · recipes26 Mar 2026
- CVE-2021-2126531İzleyin
October CMS vulnerable to Potential Host Header Poisoning on misconfigured servers
YüksekCVSS 7,5İstismar yokEPSS %2octobercms · october10 Mar 2021
- CVE-2026-6717931İzleyin
Genkit improper host header validation
YüksekCVSS 7,8İstismar yokEPSS %0genkit-ai · genkit11 Ağu 2026
- CVE-2024-106430İzleyin
Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4
YüksekCVSS 7,5İstismar yokEPSS %1craftycontrol · crafty controller3 Şub 2024
- CVE-2025-015430İzleyin
IBM TXSeries for Multiplatforms information disclosure
YüksekCVSS 7,5İstismar yokEPSS %0ibm · txseries for multiplatforms2 Nis 2025
- CVE-2023-3692128İzleyin
Header Injection in SAP Solution Manager (Diagnostic Agent)
YüksekCVSS 7,2İstismar yokEPSS %1sap · solution manager10 Tem 2023
- CVE-2025-1380327İzleyin
MediaCrush Header paths.py http headers for scripting syntax
OrtaCVSS 6,9İstismar yokEPSS %030 Kas 2025
- CVE-2022-2239926İzleyin
IBM Aspera Faspex HTTP header injection
OrtaCVSS 6,5İstismar yokEPSS %0ibm · aspera faspex5 Mar 2024
- CVE-2026-051626İzleyin
A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host
OrtaCVSS 6,5İstismar yokEPSS %0sonicwall · sonicos5 Ağu 2026
- CVE-2024-5145126İzleyin
Multiple Vulnerabilities in IBM Concert Software
OrtaCVSS 6,5İstismar yokEPSS %0ibm · concert4 Şub 2026
- CVE-2025-1480726İzleyin
IBM InfoSphere Information Server is vulnerable to HTTP header injection
OrtaCVSS 6,5İstismar yokEPSS %0ibm · infosphere information server25 Mar 2026
- CVE-2025-2790126İzleyin
Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows
OrtaCVSS 6,5İstismar yokEPSS %0ibm · db2 recovery expert17 Şub 2026
- CVE-2021-2078424İzleyin
HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote attacker to inject an
OrtaCVSS 6,1İstismar yokEPSS %1voidtools · everything13 Tem 2021