122 matches found
SuSE9 Security Update : Tomcat (YOU Patch Number 12687)
Apache Tomcat Local bypass of security manger file permissions. CVE-2010-3718 - Apache Tomcat Manager XSS vulnerability. CVE-2011-0013 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...
Debian: Security Advisory (DSA-2160-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE 10 Security Update : Tomcat (ZYPP Patch Number 7337)
This tomcat6 update fixes : - CVE-2010-3718: CVSS v2 Base Score: 4.0 AV:N/AC:H/Au:N/C:P/I:P/A:N: Design Error CWE-DesignError - CVE-2011-0013: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N: XSS CWE-79 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...
Mandriva Update for tomcat5 MDVSA-2011:030 (tomcat5)
Check for the Version of tomcat5 OpenVAS Vulnerability Test Mandriva Update for tomcat5 MDVSA-2011:030 tomcat5 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Mandriva Update for tomcat5 MDVSA-2011:030 (tomcat5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Linux Security Advisory : tomcat5 (MDVSA-2011:030)
Multiple vulnerabilities has been found and corrected in tomcat5 : When running under a SecurityManager, access to the file system is limited but web applications are granted read/write permissions to the work directory. This directory is used for a variety of temporary files such as the...
[SECURITY] [DSA 2160-1] tomcat6 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2160-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 13, 2011 http://www.debian.org/security/faq -...
DSA-2160-1 tomcat6 - several
Bulletin has no description...
Apache Tomcat 5.5.x < 5.5.30 Multiple Vulnerabilities
Binary data 5786.pasl...
Apache Tomcat 7.0.0 < 7.0.4
The version of Tomcat installed on the remote host is prior to 7.0.4. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat7.0.4security-7 advisory. - Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the...
CVE-2010-3718
CVE-2010-3718 affects Apache Tomcat 7.0.0–7.0.3, 6.0.x, and 5.5.x when running under a SecurityManager. The vulnerability is that ServletContext attributes are not made read-only, allowing local web applications to read or write files outside the intended working directory via a directory travers...
CVE-2009-3718
CVE-2009-3718 describes a SQL injection in Battle Blog (versions 1.25 and 1.30 build 2). The vulnerability is triggered via the UserName parameter in admin/authenticate.asp, allowing remote attackers to execute arbitrary SQL commands. This aligns with the NVD entry (base score 7.5, HIGH) and indi...
CVE-2009-3718
creationtimestamp| type| source ---|---|--- 2009-07-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9183...
CVE-2008-3718
CVE-2008-3718 involves multiple SQL injection vulnerabilities in cyberBB 0.6. The issue allows remote authenticated users to execute arbitrary SQL commands via the (1) id parameter to show_topic.php and (2) user parameter to profile.php. The affected component is cyberBB 0.6; root cause is input-...
CVE-2008-3718
creationtimestamp| type| source ---|---|--- 2008-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6260...
CVE-2007-3718
Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remote attack vectors and impact. NOTE: this issue contains no actionable information, but it was released by a reliable researcher...
CVE-2007-3718
Technical details about CVE-2007-3718 are not publicly available in the provided documents; no concrete affected components, versions, root cause, or fixes are disclosed here. Monitor for updates.
CVE-2007-3718
Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remote attack vectors and impact. NOTE: this issue contains no actionable information, but it was released by a reliable researcher...
CVE-2006-3718
Technical details are not publicly available in the provided documents for CVE-2006-3718; the connected EUVD entry mentions malware but does not clarify affected software, root cause, or remediation. Monitor for updates.