<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 05 Nov 2026 18:51:50 +0000</lastBuildDate>
    <item>
      <title>fkie_cve-2012-3333</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2012-3333</link>
      <description>&lt;p&gt;CRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted parameter in a URL.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;CRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted parameter in a URL.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2012-3333</guid>
    </item>
    <item>
      <title>GHSA-jp2p-x75q-6xp5</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-jp2p-x75q-6xp5</link>
      <description>&lt;p&gt;CRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted parameter in a URL.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;CRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted parameter in a URL.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-jp2p-x75q-6xp5</guid>
    </item>
    <item>
      <title>gsd-2012-3333</title>
      <link>https://vulnerability.circl.lu/vuln/gsd-2012-3333</link>
      <description>gsd-2012-3333</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/gsd-2012-3333</guid>
    </item>
  </channel>
</rss>
