# CWE-644.

Every Advisory and CVE whose sources give the weakness CWE-644, newest first.

## Records, newest first (an older page)

- [IBM CICS TX information disclosure](https://agentprime.io/advisories/CVE-2022-34316.md)
  `CVE-2022-34316` · CVE record: IBM CICS TX · CVSS 3.7 Low · Not analysed yet · Published 14 Nov 2022 · Tags: CWE-644
- [HTTP Host Header Injection](https://agentprime.io/advisories/GHSA-m2jh-fxw4-gphm.md)
  `GHSA-m2jh-fxw4-gphm`, `BIT-typo3-2021-41114`, `CVE-2021-41114`, `PKSA-ptbd-5fbp-bm32`, `PKSA-yppq-bmyt-7cxz` · Packagist `typo3/cms` and 1 more: affected `>=11.0.0, <11.5.0`, fixed in `11.5.0` · CVSS 4.8 Medium · Not analysed yet · Published 5 Oct 2021 · Tags: CWE-20, CWE-644
- [voidtools Everything: HTTP header injection vulnerability in Everything version 1.0, 1.1…](https://agentprime.io/advisories/CVE-2021-20784.md)
  `CVE-2021-20784` · CVE record: voidtools Everything · CVSS 6.1 Medium · Not analysed yet · Published 14 Jul 2021 · Tags: CWE-644
- [October CMS vulnerable to Potential Host Header Poisoning on misconfigured servers](https://agentprime.io/advisories/GHSA-xhfx-hgmf-v6vp.md)
  `GHSA-xhfx-hgmf-v6vp`, `CVE-2021-21265`, `PKSA-qdcz-hc2r-sgmp` · Packagist `october/backend`: affected `<1.1.2`, fixed in `1.1.2` · CVSS 6.8 Medium · Not analysed yet · Published 10 Mar 2021 · Tags: CWE-644
- [Honeywell WIN-PAK 4.7.2, Web and prior versions: In Honeywell WIN-PAK 4.7.2, Web and prior versions…](https://agentprime.io/advisories/CVE-2020-6982.md)
  `CVE-2020-6982` · CVE record: Honeywell WIN-PAK 4.7.2, Web and prior versions · No CVSS score · Not analysed yet · Published 24 Mar 2020 · Tags: CWE-644
- [A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0.](https://agentprime.io/advisories/CVE-2017-6031.md)
  `CVE-2017-6031` · CVE record: Certec EDV GmbH atvise scada · No CVSS score · Not analysed yet · Published 6 May 2017 · Tags: CWE-644

Newest: <https://agentprime.io/advisories/tag/cwe-644.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-644&cursor=WyIyMDIyLTEyLTAxVDE3OjAwOjU5LjYwMjAwMFoiLCJDVkUtMjAyMS0zODk5NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-644/?cursor=WyIyMDIyLTEyLTAxVDE3OjAwOjU5LjYwMjAwMFoiLCJDVkUtMjAyMS0zODk5NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.