Lucene search
K

57 matches found

OSV
OSV
added 5 days ago9 views

ROOT-APP-MAVEN-CVE-2026-5795 CVE-2026-5795 in io.root.org.eclipse.jetty.ee10:jetty-ee10-jaspi - Patched by Root

Root has patched CVE-2026-5795 in the io.root.org.eclipse.jetty.ee10:jetty-ee10-jaspi package for Root:Maven. Multiple fixed versions available...

7.4CVSS5.8AI score0.00031EPSS
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/27 2:5 p.m.12 views

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in jetty-ee10-jaspi (CVE-2026-5795)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-5795 reported for jetty-ee10-jaspi-12.0.25.jar . Vulnerability Details CVEID:CVE-2026-5795 DESCRIPTION: In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variabl...

7.4CVSS5.9AI score0.00031EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/04/30 12:0 a.m.1 views

Amazon Linux 2 : jetty, --advisory ALAS2-2026-3277 (ALAS-2026-3277)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3277 advisory. In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are conditions that cause an early...

7.4CVSS4.7AI score0.00031EPSS
Exploits0References4
Amazon
Amazon
added 2026/04/30 12:0 a.m.2 views

Important: jetty

Issue Overview: In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing those ThreadLocals. A...

7.4CVSS5.4AI score0.00031EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2026/04/14 8:39 a.m.1 views

SUSE CVE-2026-5795

In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing those ThreadLocals. A subsequent reques...

7.4CVSS5.8AI score0.00031EPSS
Exploits0References4
Circl
Circl
added 2026/04/08 2:57 p.m.2 views

CVE-2026-5795

creationtimestamp| type| source ---|---|--- 2026-04-08 14:57:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miykitb4ng2t 2026-04-08 15:16:41+00:00| seen| Telegram/Jgs5105KRNeeN6Me9oFeQT01tz9bvpQqKtTaGf0YvrxH7I 2026-04-20 11:54:00+00:00| seen|...

7.4CVSS4.7AI score0.00031EPSS
Exploits0References2
Circl
Circl
added 2025/06/06 7:42 p.m.11 views

CVE-2025-5795

creationtimestamp| type| source ---|---|--- 2025-06-06 19:42:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114638125652421315 2025-06-06 21:18:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxr44dzgb2e...

9CVSS8.7AI score0.01566EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 3:39 p.m.4 views

CVE-2020-5795

UNIX Symbolic Link Symlink Following in TP-Link Archer A7USV5200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router...

7.2CVSS7.4AI score0.00127EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:19 a.m.5 views

CVE-2024-5795

A Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause unbounded resource exhaustion by sending a large payload to the Git server. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in version...

7.7CVSS6.8AI score0.00299EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/10/22 12:0 a.m.10 views

Debian: Security Advisory (DSA-5795-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.00378EPSS
Exploits0References2
Packet Storm
Packet Storm
added 2024/09/01 12:0 a.m.145 views

Oracle Demantra Database Credentials Leak

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle Demantra Database Credentials Leak', 'Description' = %q This module exploits a database credentials leak found in Oracle Demantra 12.2.1 i...

5CVSS6.6AI score0.8237EPSS
Exploits7
OSV
OSV
added 2024/07/31 10:4 a.m.23 views

CGA-Q867-G67V-5795

Bulletin has no description...

9.9CVSS9.8AI score0.03345EPSS
Exploits0
Circl
Circl
added 2024/07/17 12:39 a.m.0 views

CVE-2024-5795

creationtimestamp| type| source ---|---|--- 2024-07-17 00:39:26+00:00| seen| https://t.me/cvedetector/1021...

7.7CVSS4.8AI score0.00299EPSS
Exploits0References1
CVE
CVE
added 2023/10/26 5:31 p.m.41 views

CVE-2023-5795

CVE-2023-5795 concerns CodeAstro POS System 1.0. The vulnerability affects an unknown function within the Profile Picture Handler component (file path: /profil), enabling an unrestricted upload. The issue is described as critical and can be triggered remotely; the exploit has been publicly disclo...

8.8CVSS7.1AI score0.00079EPSS
Exploits1References3Affected Software1
OpenVAS
OpenVAS
added 2023/01/17 12:0 a.m.23 views

Ubuntu: Security Advisory (USN-5795-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.8AI score0.01941EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2023/01/16 12:0 a.m.30 views

Ubuntu 16.04 ESM : Net-SNMP vulnerabilities (USN-5795-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5795-2 advisory. USN-5795-1 and 5543-1 fixed several vulnerabilities in Net-SNMP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM...

8.8CVSS6.8AI score0.01941EPSS
Exploits2References9
Tenable Nessus
Tenable Nessus
added 2023/01/09 12:0 a.m.29 views

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Net-SNMP vulnerabilities (USN-5795-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5795-1 advisory. It was discovered that Net-SNMP incorrectly handled certain requests. A remote attacker could possibly use these issues to cause...

6.5CVSS6.7AI score0.01941EPSS
Exploits2References3
Circl
Circl
added 2020/11/06 6:51 p.m.0 views

CVE-2020-5795

creationtimestamp| type| source ---|---|--- 2020-11-06 18:51:03+00:00| seen| https://t.me/cibsecurity/15982 2022-07-06 05:33:10+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2078...

7.2CVSS6.2AI score0.00127EPSS
Exploits1References2
NVD
NVD
added 2020/11/06 3:15 p.m.13 views

CVE-2020-5795

UNIX Symbolic Link Symlink Following in TP-Link Archer A7USV5200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router...

7.2CVSS6.5AI score0.00127EPSS
Exploits1References1
CVE
CVE
added 2020/11/06 2:9 p.m.41 views

CVE-2020-5795

The CVE-2020-5795 entry concerns TP-Link Archer A7 (US) V5_200721, where UNIX Symbolic Link (Symlink) Following allows an authenticated admin with physical and network access to execute arbitrary code after inserting a crafted USB drive. Connected records (e.g., CNVD-2020-63194 and Red Hat/other ...

7.2CVSS6.4AI score0.00127EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder