Hostnames |
cloudcall.com www.cloudcall.com |
Domains | cloudcall.com |
Cloud Provider | DigitalOcean |
Cloud Region | gb-slg |
Country | United Kingdom |
City | London |
Organization | DigitalOcean, LLC |
ISP | DigitalOcean, LLC |
ASN | AS14061 |
Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
CVE-2023-44487 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
CVE-2021-3618 | 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer. |
CVE-2021-23017 | 6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact. |
CVE-2019-9516 | 6.8Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory. |
CVE-2019-9513 | 7.8Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU. |
CVE-2019-9511 | 7.8Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both. |
CVE-2019-8331 | 4.3In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute. |
CVE-2019-20372 | 4.3NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer. |
CVE-2018-20677 | 4.3In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property. |
CVE-2018-20676 | 4.3In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute. |
CVE-2018-14042 | 4.3In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip. |
CVE-2018-14040 | 4.3In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute. |
CVE-2016-10735 | 4.3In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041. |
-1779218112 | 2024-05-12T19:56:56.01291022 / tcp
1594828214 | 2024-05-19T04:23:02.42028980 / tcp
1715168711 | 2024-05-20T16:06:24.493333443 / tcp