Skip to content
BackEsc
Sign in

CWE-113 · weakness in Injection and Smuggling

Improper Neutralization of CRLF Sequences in HTTP Headers

128 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

check available
2
likely to be exploited
1

Every one of the 128 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Kerio Control v9.2.5 - CRLF InjectionCVE-2024-52875GFI · CVSS 8.8 · 29% likely

    GFI Software

  2. Monstra CMS 3.0.4 - HTTP Header InjectionCVE-2018-169793.0% likely
  3. Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splittingCVE-2022-37436Apache Software Foundation · CVSS 5.3 · 53% likely

    Apache

  4. CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to i…CVE-2016-56999.9% likely
  5. Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attac…CVE-2016-8024Intel · 8.7% likely

    Intel Corporation

  6. Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 allows an HTTP Response Splitting attack. An attacker can inject a crafted key a…CVE-2017-177425.5% likely
  7. CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote…CVE-2016-53254.1% likely
  8. Apache HTTP Server: HTTP Response Splitting in multiple modulesCVE-2024-24795Apache Software Foundation · CVSS 6.3 · 2.9% likely

    Apache

  9. HTTP Response Splitting in PumaCVE-2020-5247puma · CVSS 6.5 · 2.5% likely

    Puma

  10. CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2, allows remote attackers…CVE-2016-49932.5% likely
  11. Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs a…CVE-2018-7830Schneider Electric SE · 2.4% likely

    Schneider Electric

  12. Apache Flink Stateful Functions allowed HTTP header injection due to Improper Neutralization of CRLF SequencesCVE-2023-41834Apache Software Foundation · 2.3% likely

    Apache

  13. CRLF injection vulnerability in the drupal_goto function in includes/common.inc Drupal 4.7.x before 4.7.8 and 5.x before 5.3 allows remote attackers to inject arbitrary HTTP heade…CVE-2007-55952.0% likely
  14. Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection ChainCVE-2026-40175axios · CVSS 4.8 · 2.0% likelycovered by CyberSIXT

    Axios

  15. In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP…CVE-2018-1067undertow · CVSS 5.4 · 1.8% likely
  16. HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30.CVE-2015-14451.8% likely
  17. An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.CVE-2018-188371.8% likely
  18. A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V14), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V14), SIMATIC HMI KTP…CVE-2018-13814Siemens AG · 1.7% likely

    Siemens

  19. A vulnerability in the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to conduct a HTTP response splitting attack. The vulnerability is due t…CVE-2017-12309Cisco Email Security Appliance · 1.7% likely
  20. HTTP header injection vulnerability in SEIKO EPSON printers and scanners (DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 20…CVE-2018-0689SEIKO EPSON CORPORATION · 1.6% likely

    SEIKO EPSON CORPORATION

  21. HTTP Response Splitting (Early Hints) in PumaCVE-2020-5249puma · CVSS 6.5 · 1.6% likely

    Puma

  22. CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP heade…CVE-2015-07331.5% likely
  23. A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline…CVE-2020-10753Red Hat · CVSS 5.4 · 1.5% likely

    Red Hat

  24. Insufficient sanitization of Host header in net/httpCVE-2023-29406Go standard library · 1.5% likely

    Go standard library

  25. IBM Security Guardium 10.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to…CVE-2017-1262IBM · 1.3% likely

    IBM

  26. The YunoHost 2.7.2 through 2.7.14 web application is affected by one HTTP Response Header Injection. This flaw allows an attacker to inject, into the response from the server, one…CVE-2018-113471.3% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in