CVE-2023-46589

creationtimestamp| type| source ---|---|--- 2023-12-17 20:17:54+00:00| seen| https://t.me/ctinow/155664 2023-12-23 11:53:39+00:00| seen| https://t.me/LearnExploit/5801 2024-02-06 20:17:12+00:00| seen| https://t.me/ctinow/180290 2024-02-06 21:46:31+00:00| seen| https://t.me/ctinow/180356 2024-02-0...

Upgrade Tomcat to fix CVE-2023-46589

h3. Issue Summary This is reproducible on Data Center: / Apache Tomcat should be upgraded to 8.5.96 and later or 9.0.83 or a later version to fix CVE-2023-46589|https://nvd.nist.gov/vuln/detail/CVE-2023-46589. h3. Environment From Confluence 6.10.0, which comes with Apache 9.0.8, up to Confluence...

Apache Tomcat Request Smuggling Vulnerability (Nov 2023) - Windows

Apache Tomcat is prone to a request smuggling vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat"; if...

CVE-2023-46589 vulnerabilities

Vulnerabilities for packages: spark-compat, spark-compat-minimal...

CVE-2023-46589

CVE-2023-46589 : Improper input validation in Apache Tomcat allows HTTP trailer headers to exceed the header size limit, causing the server to treat a single request as multiple requests and enabling potential request smuggling when behind a reverse proxy. Affected lines cover Tomcat releases fro...

Apache Tomcat 10.1.0.M1 < 10.1.16

The version of Tomcat installed on the remote host is prior to 10.1.16. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat10.1.16security-10 advisory. - Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from...

KLA62191 ACE vulnerability in Apache Tomcat

A improper input validation vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Fixed in Apache Tomcat 9.0.83 Related products Apache-Tomcat CVE list CVE-2023-46589 critical Solution Update to the latest version...

KLA62193 ACE vulnerability in Apache Tomcat

A improper input validation vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Fixed in Apache Tomcat 10.1.16 Related products Apache-Tomcat CVE list CVE-2023-46589 critical Solution Update to the latest version...

KLA62192 ACE vulnerability in Apache Tomcat

A improper input validation vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Fixed in Apache Tomcat 8.5.96 Related products Apache-Tomcat CVE list CVE-2023-46589 critical Solution Update to the latest version...

Fixed in Apache Tomcat 11.0.0-M11

Moderate: Open redirect CVE-2023-41080 If the ROOT default web application is configured to use FORM authentication then it is possible that a specially crafted URL could be used to trigger a redirect to an URL of the attackers choice. This was fixed with commit e3703c9a. This issue was reported ...

CVE-2022-46589

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstatoption parameter in the toolsnetstat sub41E730 function...

CVE-2022-46589

CVE-2022-46589 : TRENDnet TEW755AP v1.13B01 has a stack overflow in the “cameo.cameo.netstat_option” parameter of the tools_netstat function (sub_41E730). The underlying issue is a lack of input size checking in that parameter, which can lead to a stack overflow. Several connected sources confirm...

CVE-2021-46589

creationtimestamp| type| source ---|---|--- 2022-02-18 22:44:37+00:00| seen| https://t.me/cibsecurity/37789...

CVE-2021-46589

Bentley MicroStation CONNECT vulnerability CVE-2021-46589 involves a DGN file parsing flaw that can trigger an out-of-bounds read on an affected installation (MicroStation CONNECT 10.16.0.80). The issue stems from insufficient validation of user-supplied data and can allow an attacker to disclose...