Skip to content
Noroxi

puma records

13 published records for vendor puma.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
92.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

13 records
  • CVE-2023-40175
    39Monitor

    Inconsistent Interpretation of HTTP Requests in puma

    CriticalCVSS 9.8No exploitEPSS 1%

    puma · pumaAug 18, 2023

  • CVE-2020-11076
    31Monitor

    HTTP Smuggling via Transfer-Encoding Header in Puma

    HighCVSS 7.5Proof of conceptEPSS 4%

    puma · pumaMay 22, 2020

  • CVE-2020-11077
    31Monitor

    HTTP Smuggling via Transfer-Encoding Header in Puma

    HighCVSS 7.5No exploitEPSS 3%

    puma · pumaMay 22, 2020

  • CVE-2020-5247
    31Monitor

    HTTP Response Splitting in Puma

    HighCVSS 7.5No exploitEPSS 3%

    puma · pumaFeb 28, 2020

  • CVE-2022-24790
    31Monitor

    HTTP Request Smuggling in puma

    HighCVSS 7.5No exploitEPSS 2%

    puma · pumaMar 30, 2022

  • CVE-2019-16770
    31Monitor

    Potential DOS attack in Puma

    HighCVSS 7.5No exploitEPSS 2%

    puma · pumaDec 5, 2019

  • CVE-2021-29509
    30Monitor

    Keepalive Connections Causing Denial Of Service in puma

    HighCVSS 7.5No exploitEPSS 2%

    puma · pumaMay 11, 2021

  • CVE-2024-21647
    30Monitor

    HTTP Request/Response Smuggling in puma

    HighCVSS 7.5No exploitEPSS 1%

    puma · pumaJan 8, 2024

  • CVE-2020-5249
    26Monitor

    HTTP Response Splitting (Early Hints) in Puma

    MediumCVSS 6.5No exploitEPSS 2%

    puma · pumaMar 2, 2020

  • CVE-2022-23634
    24Monitor

    Information Exposure when using Puma with Rails

    MediumCVSS 5.9No exploitEPSS 2%

    puma · pumaFeb 11, 2022

  • CVE-2017-8943
    23Monitor

    The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof s

    MediumCVSS 5.9No exploitEPSS 1%

    puma · pumatracMay 15, 2017

  • CVE-2024-45614
    21Monitor

    Header normalization allows for client to clobber proxy set headers in Puma

    MediumCVSS 5.4Proof of conceptEPSS 1%

    puma · pumaSep 19, 2024

  • CVE-2021-41136
    14Monitor

    Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma

    LowCVSS 3.7No exploitEPSS 1%

    puma · pumaOct 12, 2021