Lucene search
K

10 matches found

CNNVD
CNNVD
added 2025/05/23 12:0 a.m.1 views

WordPress plugin MapSVG 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.3AI score0.00272EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/05/16 12:0 a.m.1 views

PT-2025-21708 · Mapsvg · Mapsvg

Name of the Vulnerable Software and Affected Versions: MapSVG versions through 8.5.31 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious...

6.5CVSS6.7AI score0.00143EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2019/05/13 12:0 a.m.25 views

Apache Tomcat 8.5.x < 8.5.31 Denial of Service

Binary data 700694.pasl...

7.5CVSS7.3AI score0.19427EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2018/11/05 12:0 a.m.9 views

Apache Tomcat 8.5.0 < 8.5.31 Denial of Service

The version of Apache Tomcat installed on the remote host is 8.5.x prior to 8.5.31. It is, therefore, affected by a denial of service due to a bug in UTF-8 decoder. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number...

7.5CVSS7.3AI score0.19427EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2018/08/03 12:0 a.m.134 views

Apache Tomcat 'Hostname Verification' Security Bypass Vulnerability - Windows

Apache Tomcat is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat";...

7.5CVSS8.8AI score0.13337EPSS
Exploits0References5
CNVD
CNVD
added 2018/07/26 12:0 a.m.2 views

Apache Tomcat Security Restriction Bypass Vulnerability (CNVD-2018-15543)

Tomcat server is a free and open source web application server that is a lightweight application server. A security bypass vulnerability exists in Apache Tomcat versions 7.0.25 through 7.0.88, 8.5.0 through 8.5.31, and 9.0.0.M1 and 9.0.9. A remote attacker could use this vulnerability to bypass...

7.5CVSS8.7AI score0.13337EPSS
Exploits0References1
Symantec
Symantec
added 2018/07/22 12:0 a.m.83 views

Apache Tomcat CVE-2018-8037 Information Disclosure Vulnerability

Description Apache Tomcat is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Apache Tomcat 8.5.5 through 8.5.31 and 9.0.0.M9 through 9.0.9 are vulnerable. Technologies Affected Apache Tomcat 8.5.11...

4.3CVSS0.4AI score0.09047EPSS
Exploits0References7Affected Software4
Positive Technologies
Positive Technologies
added 2018/06/26 12:0 a.m.7 views

PT-2018-2982 · Apache +7 · Apache Tomcat +7

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 7.0.35 through 7.0.88 Apache Tomcat versions 8.0.0.RC1 through 8.0.52 Apache Tomcat versions 8.5.0 through 8.5.31 Apache Tomcat versions 9.0.0.M1 through 9.0.9 Description: The issue is related to the host name...

9.8CVSS6.5AI score0.94469EPSS
Exploits120References216
OpenVAS
OpenVAS
added 2018/05/22 12:0 a.m.674 views

Apache Tomcat 'CORS Filter' Setting Security Bypass Vulnerability

Apache Tomcat is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat";...

9.8CVSS8.8AI score0.61177EPSS
Exploits0References4
Apache Tomcat
Apache Tomcat
added 2018/05/04 12:0 a.m.84 views

Fixed in Apache Tomcat 8.5.31

Important: A bug in the UTF-8 decoder can lead to DoS CVE-2018-1336 An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. This was fixed in revision 1830374. This issue was reported publicly on 6...

7.5CVSS7.7AI score0.19427EPSS
Exploits0Affected Software1
Rows per page
Query Builder