Apsis Pound — known CVE vulnerabilities

Every CVE whose affected-product data names Apsis Pound, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2016-10711 — CVSS 9.8 (critical): Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751.
• CVE-2018-21245 — CVSS 9.1 (critical): Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.
• CVE-2004-2026 — CVSS 7.5 (high): Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via…
• CVE-2005-1391 — CVSS 7.5 (high): Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host…
• CVE-2005-3751 — CVSS 4.3 (medium): HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall…