Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
photonPhotonPHSA-2021-3.0-0312
HistoryOct 09, 2021 - 12:00 a.m.

Critical Photon OS Security Update - PHSA-2021-3.0-0312

2021-10-0900:00:00
github.com
32
photon os
security update
apache-tomcat
vim
httpd
unix

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.006

Percentile

77.9%

JSON

Updates of [‘apache-tomcat’, ‘httpd’, ‘vim’] packages of Photon OS have been released.

Related

photon 12
redhat 4
ubuntucve 3
nessus 49
openvas 27
nvd 4
osv 16
debian 3
ibm 17
amazon 1
kaspersky 1
github 1
tomcat 3
redhatcve 3
f5 2
veracode 3
cvelist 4
cloudlinux 4
cnvd 2
prion 4
httpd 1
cbl_mariner 3
debiancve 3
alpinelinux 2
cve 4
huntr 1
oraclelinux 4
rocky 2
almalinux 2
mageia 1
fedora 1
vmware 2
hivepro 1
exploitdb 1
packetstorm 1
zdt 2
suse 2
cloudfoundry 1
ubuntu 1
ics 1
photon
photon
Important Photon OS Security Update - PHSA-2021-0401
2021-10-04 00:00:00
Important Photon OS Security Update - PHSA-2021-0438
2021-10-04 00:00:00
Critical Photon OS Security Update - PHSA-2021-0444
2021-10-19 00:00:00
redhat
redhat
(RHSA-2021:3743) Important: Red Hat JBoss Web Server 5.5.1 Security Update
2021-10-06 14:12:59
(RHSA-2021:3741) Important: Red Hat JBoss Web Server 5.5.1 Security Update
2021-10-06 13:17:43
(RHSA-2021:4517) Moderate: vim security update
2021-11-09 13:22:45
ubuntucve
ubuntucve
CVE-2021-41079
2021-09-16 00:00:00
CVE-2021-39275
2021-09-16 00:00:00
CVE-2021-3796
2021-09-15 00:00:00
nessus
nessus
Photon OS 3.0: Apache PHSA-2021-3.0-0312
2021-10-11 00:00:00
Photon OS 1.0: Apache PHSA-2021-1.0-0438
2021-10-07 00:00:00
Photon OS 2.0: Apache PHSA-2021-2.0-0401
2021-10-07 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2764-1)
2021-09-23 00:00:00
Apache Tomcat DoS Vulnerability (Sep 2021) - Linux
2021-09-17 00:00:00
Apache Tomcat DoS Vulnerability (Sep 2021) - Windows
2021-09-17 00:00:00
nvd
nvd
CVE-2021-41079
2021-09-16 15:15:07
CVE-2021-39275
2021-09-16 15:15:07
CVE-2021-3796
2021-09-15 13:15:08
osv
osv
tomcat9 - security update
2021-10-14 00:00:00
CVE-2021-41079
2021-09-16 15:15:07
tomcat8 - security update
2021-09-22 00:00:00
debian
debian
[SECURITY] [DLA 2764-1] tomcat8 security update
2021-09-22 23:10:50
[SECURITY] [DSA 4984-1] tomcat9 security update
2021-10-14 20:33:21
[SECURITY] [DLA 2776-1] apache2 security update
2021-10-02 16:07:56
ibm
ibm
Security Bulletin: IBM UrbanCode Release is affected by CVE-2021-41079
2022-01-25 07:57:49
Security Bulletin: IBM UrbanCode Build is affected by CVE-2021-41079
2022-02-09 16:25:24
Security Bulletin: Multiple vulnerabilities in Apache Tomcat affects App Connect Professional.
2021-12-14 11:38:08
amazon
amazon
Important: tomcat8
2021-10-26 23:35:00
kaspersky
kaspersky
KLA12291 DoS vulnerability in Apache Tomcat
2021-03-10 00:00:00
github
github
Infinite loop in Tomcat due to parsing error
2021-09-20 20:45:44
tomcat
tomcat
Fixed in Apache Tomcat 10.0.4
2021-03-10 00:00:00
Fixed in Apache Tomcat 9.0.44
2021-03-10 00:00:00
Fixed in Apache Tomcat 8.5.64
2021-03-10 00:00:00
redhatcve
redhatcve
CVE-2021-41079
2021-09-16 07:31:40
CVE-2021-39275
2021-09-16 20:45:55
CVE-2021-3796
2021-09-15 20:13:12
f5
f5
K30502720 : Apache Tomcat vulnerability CVE-2021-41079
2021-09-22 00:00:00
K20622400 : Apache HTTP server vulnerability CVE-2021-39275
2021-10-25 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-09-21 11:11:22
Denial Of Service (DoS)
2021-09-20 15:14:40
Denial Of Service (DoS)
2021-09-30 13:39:15
cvelist
cvelist
CVE-2021-39275 ap_escape_quotes buffer overflow
2021-09-16 14:40:22
CVE-2021-3796 Use After Free in vim/vim
2021-09-15 00:00:00
CVE-2021-41079 Apache Tomcat DoS with unexpected TLS packet
2021-09-16 14:40:25
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-39275
2021-10-20 15:53:36
Fix of CVE: CVE-2021-39275
2021-10-11 15:13:18
Fix of CVE: CVE-2021-3778, CVE-2021-3796
2021-10-11 15:13:49
cnvd
cnvd
Apache HTTP Server ap_escape_quotes buffer overflow vulnerability
2021-09-18 00:00:00
vim post-release reuse vulnerability (CNVD-2021-99302)
2021-09-16 00:00:00
prion
prion
Design/Logic Flaw
2021-09-15 13:15:00
Input validation
2021-09-16 15:15:00
Denial of service
2021-09-16 15:15:00
httpd
httpd
Apache Httpd < 2.4.49 : ap_escape_quotes buffer overflow
2021-09-16 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-39275 affecting package httpd 2.4.46-6
2021-10-15 04:46:31
CVE-2021-39275 affecting package httpd for versions less than 2.4.52-1
2022-04-09 06:51:57
CVE-2021-3796 affecting package vim 8.1.1667-1
2021-11-03 19:21:17
debiancve
debiancve
CVE-2021-39275
2021-09-16 15:15:07
CVE-2021-41079
2021-09-16 15:15:07
CVE-2021-3796
2021-09-15 13:15:08
alpinelinux
alpinelinux
CVE-2021-39275
2021-09-16 15:15:07
CVE-2021-3796
2021-09-15 13:15:08
cve
cve
CVE-2021-39275
2021-09-16 15:15:07
CVE-2021-41079
2021-09-16 15:15:07
CVE-2021-3796
2021-09-15 13:15:08
huntr
huntr
None in vim/vim
2021-09-11 11:45:52
oraclelinux
oraclelinux
httpd:2.4 security update
2022-01-06 00:00:00
httpd security update
2021-12-16 00:00:00
httpd:2.4 security update
2022-03-16 00:00:00
rocky
rocky
httpd:2.4 security update
2022-03-15 09:10:44
vim security update
2021-11-09 13:22:45
almalinux
almalinux
Moderate: httpd:2.4 security update
2022-03-15 09:10:44
Moderate: vim security update
2021-11-09 13:22:45
mageia
mageia
Updated vim packages fix security vulnerability
2021-10-21 00:28:32
fedora
fedora
[SECURITY] Fedora 34 Update: vim-8.2.3512-1.fc34
2021-10-16 20:44:57
vmware
vmware
VMware Cloud Director Appliance contains an authentication bypass vulnerability (CVE-2023-34060).
2023-11-14 00:00:00
VMware Cloud Director Appliance contains an authentication bypass vulnerability (CVE-2023-34060).
2023-11-14 00:00:00
hivepro
hivepro
VMware Unveils Critical Authentication Bypass Vulnerability in VCD Appliance
2023-11-17 08:07:39
exploitdb
exploitdb
VMware Cloud Director 10.5 - Bypass identity verification
2024-03-12 00:00:00
packetstorm
packetstorm
VMware Cloud Director 10.5 Authentication Bypass
2024-03-13 00:00:00
zdt
zdt
VMware Cloud Director - Bypass identity verification Exploit
2023-12-08 00:00:00
VMware Cloud Director 10.5 - Bypass identity verification Exploit
2024-03-12 00:00:00
suse
suse
Security update for tomcat (moderate)
2021-11-16 00:00:00
Security update for tomcat (moderate)
2021-11-19 00:00:00
cloudfoundry
cloudfoundry
USN-5093-1: Vim vulnerabilities | Cloud Foundry
2021-10-28 00:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2021-09-27 00:00:00
ics
ics
Siemens Apache HTTP Server (Update A)
2022-10-13 12:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.006

Percentile

77.9%

JSON
Related for PHSA-2021-3.0-0312
photon12redhat4ubuntucve3nessus49openvas27nvd4osv16debian3ibm17amazon1kaspersky1github1tomcat3redhatcve3f52veracode3cvelist4cloudlinux4cnvd2prion4httpd1cbl_mariner3debiancve3alpinelinux2cve4huntr1oraclelinux4rocky2almalinux2mageia1fedora1vmware2hivepro1exploitdb1packetstorm1zdt2suse2cloudfoundry1ubuntu1ics1