Approved changes feed: RSS · Atom

cpe:2.3:a:apsis:pound:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApsis (d1d33a1a-0e80-5ceb-a2d6-e598fa221caf)
ProductPound (4e3290d3-7193-5ede-a5d1-2be90926dc66)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/pound purl2cpe 2026-06-01 10:11:29.205397
pkg:deb/ubuntu/pound purl2cpe 2026-06-01 10:11:29.205401
pkg:github/fireeye/pound purl2cpe 2026-06-01 10:11:29.205404
pkg:github/srcshelton/pound purl2cpe 2026-06-01 10:11:29.205408
pkg:rpm/fedora/pound purl2cpe 2026-06-01 10:11:29.205411
pkg:rpm/opensuse/pound purl2cpe 2026-06-01 10:11:29.205415

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-21245 vulnerable 2026-06-08 05:11:29.083333 Details available
Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.
Published: 2020-06-15T16:50:38.000Z
Updated: 2024-08-05T12:26:39.586Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10711 vulnerable 2026-06-08 05:07:25.616728 Details available
Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751.
Published: 2018-01-29T20:00:00.000Z
Updated: 2024-08-06T03:30:20.172Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3751 vulnerable 2026-06-08 04:48:42.091097 Details available
HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers.
Published: 2005-11-22T20:00:00.000Z
Updated: 2024-08-07T23:24:36.215Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.