Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect Rational Service Tester

Summary Eclipse Jetty contains vulnerabilities that may allow a remote attacker to obtain sensitive information, cause execution of scripts without their knowledge and experience denial of service attacks. Vulnerability Details CVEID: CVE-2019-10241 DESCRIPTION: Eclipse Jetty is vulnerable to...

Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect Rational Performance Tester

Summary Eclipse Jetty contains vulnerabilities that may allow a remote attacker to obtain sensitive information, cause execution of scripts without their knowledge and experience denial of service attacks. Vulnerability Details CVEID: CVE-2019-10241 DESCRIPTION: Eclipse Jetty is vulnerable to...

Security Bulletin: Multiple vulnerabilities in Jetty affect Netcool Agile Service Manager (CVE-2019-10247, CVE-2019-10246)

Summary There are multiple vulnerabilities in Eclipse Jetty used by Netcool Agile Service Manager. Netcool Agile Service Manager has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-10247 DESCRIPTION: Eclipse Jetty could allow a remote attacker to obtain sensitive information,...

Eclipse Jetty Information Disclosure Vulnerability (CVE-2019-10247) - Linux

Eclypse Jetty is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty"...

Eclipse Jetty Information Disclosure Vulnerability (CVE-2019-10247) - Windows

Eclypse Jetty is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty"...

CVE-2019-10247

CVE-2019-10247 affects Eclipse Jetty when configured to list contexts in 404 responses. Jetty versions 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older disclose the fully qualified directory base resource location in the HTML output of a not-found Context, via the DefaultHandler...

CVE-2017-10247

CVE-2017-10247 affects Oracle PeopleSoft Enterprise PRTL Interaction Hub HTML Area (in PeopleSoft 9.1.0). The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise data; attempts require user interaction. Impact includes unauthorized read and, for some data, ...

CVE-2016-10247

Buffer overflow in the mygetline function in jstestmain.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause a denial of service out-of-bounds write via a crafted file...

CVE-2016-10247

CVE-2016-10247 is a buffer overflow in the my_getline function of jstest_main.c in MuPDF (Artifex MuPDF) prior to 1.10, enabling a remote attacker to cause a denial of service via a crafted file (out-of-bounds write). Connected advisories indicate multiple related mupdf issues and a Debian LTS fi...

CVE-2016-10247

Buffer overflow in the mygetline function in jstestmain.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause a denial of service out-of-bounds write via a crafted file...

CVE-2016-10247

Buffer overflow in the mygetline function in jstestmain.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause a denial of service out-of-bounds write via a crafted file...

CVE-2016-10247

Buffer overflow in the mygetline function in jstestmain.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause a denial of service out-of-bounds write via a crafted file...