Lucene search
+L

58 matches found

OSV
OSV
added 2026/08/14 12:22 p.m.28 views

ROOT-APP-MAVEN-CVE-2026-5795 CVE-2026-5795 in org.eclipse.jetty.ee10:jetty-ee10-jaspi - Patched by Root

Root has patched CVE-2026-5795 in the org.eclipse.jetty.ee10:jetty-ee10-jaspi package for Root:Maven. Multiple fixed versions available...

7.4CVSS7.1AI score0.00529EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/27 2:05 p.m.20 views

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in jetty-ee10-jaspi (CVE-2026-5795)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-5795 reported for jetty-ee10-jaspi-12.0.25.jar . Vulnerability Details CVEID:CVE-2026-5795 DESCRIPTION: In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variabl...

7.4CVSS5.9AI score0.00529EPSS
SaveExploits0Affected Software1
Amazon
Amazon
added 2026/04/30 12:00 a.m.24 views

Important: jetty

Issue Overview: In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing those ThreadLocals. A...

7.4CVSS5.4AI score0.00529EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/30 12:00 a.m.7 views

Amazon Linux 2 : jetty, --advisory ALAS2-2026-3277 (ALAS-2026-3277)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3277 advisory. In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are conditions that cause an early...

7.4CVSS4.7AI score0.00529EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/04/14 8:39 a.m.12 views

SUSE CVE-2026-5795

In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing those ThreadLocals. A subsequent reques...

7.4CVSS5.8AI score0.00529EPSS
SaveExploits0References4
Circl
Circl
added 2026/04/08 2:57 p.m.14 views

CVE-2026-5795

creationtimestamp| type| source ---|---|--- 2026-04-08 14:57:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miykitb4ng2t 2026-04-08 15:16:41+00:00| seen| Telegram/Jgs5105KRNeeN6Me9oFeQT01tz9bvpQqKtTaGf0YvrxH7I 2026-04-20 11:54:00+00:00| seen|...

7.4CVSS4.7AI score0.00529EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/08 1:32 p.m.6 views

CVE-2026-5795

In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing those ThreadLocals. A subsequent reques...

7.4CVSS6AI score
SaveExploits0References11
Circl
Circl
added 2025/06/06 7:42 p.m.27 views

CVE-2025-5795

creationtimestamp| type| source ---|---|--- 2025-06-06 19:42:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114638125652421315 2025-06-06 21:18:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxr44dzgb2e...

9CVSS8.7AI score0.00818EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 3:39 p.m.15 views

CVE-2020-5795

UNIX Symbolic Link Symlink Following in TP-Link Archer A7USV5200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router...

7.2CVSS7.4AI score0.01068EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:19 a.m.23 views

CVE-2024-5795

A Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause unbounded resource exhaustion by sending a large payload to the Git server. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in version...

7.7CVSS6.8AI score0.00557EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/10/22 12:00 a.m.11 views

Debian: Security Advisory (DSA-5795-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.0069EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2024/09/01 12:00 a.m.165 views

Oracle Demantra Database Credentials Leak

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle Demantra Database Credentials Leak', 'Description' = %q This module exploits a database credentials leak found in Oracle Demantra 12.2.1 i...

5CVSS6.6AI score0.59558EPSS
SaveExploits7
OSV
OSV
added 2024/07/31 10:04 a.m.25 views

CGA-Q867-G67V-5795

Bulletin has no description...

9.9CVSS9.8AI score0.16496EPSS
SaveExploits0
Circl
Circl
added 2024/07/17 12:39 a.m.14 views

CVE-2024-5795

creationtimestamp| type| source ---|---|--- 2024-07-17 00:39:26+00:00| seen| https://t.me/cvedetector/1021...

7.7CVSS4.8AI score0.00557EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/26 5:31 p.m.54 views

CVE-2023-5795

CVE-2023-5795 concerns CodeAstro POS System 1.0. The vulnerability affects an unknown function within the Profile Picture Handler component (file path: /profil), enabling an unrestricted upload. The issue is described as critical and can be triggered remotely; the exploit has been publicly disclo...

8.8CVSS7.1AI score0.00763EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2023/01/17 12:00 a.m.27 views

Ubuntu: Security Advisory (USN-5795-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.8AI score0.5346EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2023/01/16 12:00 a.m.33 views

Ubuntu 16.04 ESM : Net-SNMP vulnerabilities (USN-5795-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5795-2 advisory. USN-5795-1 and 5543-1 fixed several vulnerabilities in Net-SNMP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM...

8.8CVSS6.8AI score0.5346EPSS
SaveExploits2References9
Tenable Nessus
Tenable Nessus
added 2023/01/09 12:00 a.m.31 views

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Net-SNMP vulnerabilities (USN-5795-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5795-1 advisory. It was discovered that Net-SNMP incorrectly handled certain requests. A remote attacker could possibly use these issues to cause...

6.5CVSS6.7AI score0.5346EPSS
SaveExploits2References3
Circl
Circl
added 2020/11/06 6:51 p.m.12 views

CVE-2020-5795

creationtimestamp| type| source ---|---|--- 2020-11-06 18:51:03+00:00| seen| https://t.me/cibsecurity/15982 2022-07-06 05:33:10+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2078...

7.2CVSS6.2AI score0.01068EPSS
SaveExploits1References2
NVD
NVD
added 2020/11/06 3:15 p.m.26 views

CVE-2020-5795

UNIX Symbolic Link Symlink Following in TP-Link Archer A7USV5200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router...

7.2CVSS6.5AI score0.01068EPSS
SaveExploits1References1
Rows per page
Query Builder