Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
apsis vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2004-2026
Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and previous versions allows remote malicious users to execute arbitrary code via format string specifiers in syslog messages.
Apsis Pound 1.0
Apsis Pound 1.1
Apsis Pound 1.2
Apsis Pound 1.3
Apsis Pound 1.4
Apsis Pound 1.5
1 EDB exploit
5.4
CVSSv2
CVE-2014-7671
The Tekno Apsis (aka com.teknoapsis) application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle malicious users to spoof servers and obtain sensitive information via a crafted certificate.
Tekno Apsis Project Tekno Apsis 2.4
6.4
CVSSv2
CVE-2018-21245
Pound prior to 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.
Apsis Pound
4.3
CVSSv2
CVE-2005-3751
HTTP request smuggling vulnerability in Pound prior to 1.9.4 allows remote malicious users to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers.
Apsis Pound
7.5
CVSSv2
CVE-2005-1391
Buffer overflow in the add_port function in APSIS Pound 1.8.2 and previous versions allows remote malicious users to execute arbitrary code via a long Host HTTP header.
Apsis Pound 1.8.2
7.5
CVSSv2
CVE-2016-10711
Apsis Pound prior to 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751.
Debian Debian Linux 7.0
Apsis Pound
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserialization
CVE-2024-4040
cross-site scripting
CVE-2023-25790
CVE-2024-2961
XML external entity
CVE-2024-26926
CVE-2024-32806
CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started