Vulnerabilities (CVE)

Filtered by CWE-113
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-5595 1 Drupal 1 Drupal 2018-10-26 5.1 MEDIUM N/A
CRLF injection vulnerability in the drupal_goto function in includes/common.inc Drupal 4.7.x before 4.7.8 and 5.x before 5.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
CVE-2015-0733 1 Cisco 1 Headend Digital Broadband Delivery System 2017-01-04 4.3 MEDIUM N/A
CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks, via a crafted request, aka Bug ID CSCur25580.