VulnSea

CWE-644

CVEs classified under CWE-644, newest first.

9 CVEsRSS

CVE-2026-69183High· 7.5
1mo ago

Monkeytype is a minimalistic and customizable typing test

Monkeytype is a minimalistic and customizable typing test. In 26.26.0 and earlier, the backend rate-limit key generator in backend/src/middlewares/rate-limit.ts uses client-controlled cf-connecting-ip and x-forwarded-for headers before t…

TwilightEPSS 0.33%via NVD
CVE-2026-66778Medium· 5.3
1mo ago

SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components

SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send a specially crafted request to obtain limited unauthorized access to informatio…

Sunlitsap · approuterEPSS 0.23%via NVD
CVE-2026-0516Medium· 6.5
1mo ago

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.

SunlitEPSS 0.21%via NVD
CVE-2026-48061Medium· 5.9
1mo ago

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. In versions prior to 2.22.0, an attacker can bypass the allowed hosts validation by omitting the Host header and supplying an X-Forwarded-Host header set to a whiteli…

Sunlitlitestar · litestarEPSS 0.34%via NVD
CVE-2026-48126High· 8.2
3mo ago

Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir

Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir

Twilightxyproto · github.com/xyproto/algernonEPSS 0.34%via GHSA
CVE-2026-4096Medium· 6.5
3mo ago

IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers

IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cros…

Sunlithcltech · devops_planEPSS 0.15%via NVD
CVE-2026-1698Medium· 6.1
6mo ago

A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker to inject harmful payloads that manipulate server-side behavior. This…

A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker to inject harmful payloads that manipulate server-side behavior. This…

Sunlitarcinfo · pcvueEPSS 0.21%via NVD
CVE-2025-13803High· 7.3
9mo ago

A vulnerability was identified in MediaCrush 1.0.0/1.0.1

A vulnerability was identified in MediaCrush 1.0.0/1.0.1. The affected element is an unknown function of the file /mediacrush/paths.py of the component Header Handler. Such manipulation of the argument Host leads to improper neutralizati…

TwilightEPSS 0.35%via NVD
CVE-2024-10006High· 8.3
1y ago

hashicorp/consul: consul: Consul L7 Intentions Vulnerable To Headers Bypass (CVE-2024-10006)

A flaw was found in HashiCorp Consul and Consul Enterprise. The server response does not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and can lead to reflected cross-site scripting (XSS).

TwilightRed Hat · Red Hat OpenShift Dev Spaces (RHOSDS) 3.23EPSS 0.47%via CSAF
CWE-644 vulnerabilities (CVEs) · VulnSea