Skip to content
OpenAdvisories

Archive

20 December 2019

Vulnerabilities first published on this day (UTC), newest first.

← November 2019 2019 / December /20 January 2020 →
  1. 15
  2. 241
  3. 364
  4. 438
  5. 547
  6. 649
  7. 7 
  8. 89
  9. 927
  10. 10100
  11. 1177
  12. 12123
  13. 1359
  14. 14 
  15. 1510
  16. 1648
  17. 1771
  18. 18369
  19. 1956
  20. 2036
  21. 21 
  22. 222
  23. 2357
  24. 2421
  25. 253
  26. 2673
  27. 2766
  28. 281
  29. 2912
  30. 3079
  31. 3144
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2019-16785

    HTTP Request Smuggling: LF vs CRLF handling in Waitress

    Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize a single LF as a line terminator and ignore any preceding C…

    Pylons Waitress waitress waitress Debian Ubuntu Alpine PyPI
  • High 7.1
    CVE-2019-16786

    HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress

    Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that value was not chunked it would fall through and use the Content-Length header instead. According to the HTTP standard Transfer-Encoding sh…

    Pylons Waitress waitress waitress Debian Ubuntu Alpine PyPI
  • High 7.3
    CVE-2019-19231 Public exploit

    An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that …

    CA Technologies, Broadcom Company CA Client Automation