Lucene search
K

6 matches found

OSV
OSV
added 2025/11/18 3:44 p.m.1 views

GO-2025-4121 LXD vulnerable to a local privilege escalation through custom storage volumes in lxd in github.com/canonical/lxd

LXD vulnerable to a local privilege escalation through custom storage volumes in lxd in github.com/canonical/lxd...

6.8AI score
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2023/09/29 12:0 a.m.38 views

Debian DSA-5507-1 : jetty9 - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5507 advisory. Multiple security vulnerabilities were found in Jetty, a Java based web server and servlet engine. The org.eclipse.jetty.servlets.CGI class has been...

5.3CVSS7.2AI score0.43407EPSS
Exploits2References14
CVE
CVE
added 2023/09/15 6:37 p.m.1015 views

CVE-2023-36479

What is affected. Jetty’s CGI Servlet (org.eclipse.jetty.servlets.CGI) in Jetty versions impacted by CVE-2023-36479. Root cause. When a request targets a binary with a space in its name, Jetty escapes the command by wrapping it in quotes; if the binary name contains a quotation mark followed by a...

3.5CVSS5.9AI score0.01383EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2023/09/15 6:37 p.m.24 views

CVE-2023-36479 Jetty vulnerable to errant command quoting in CGI Servlet

Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, th...

3.5CVSS5.5AI score0.01383EPSS
Exploits1References6
Debian CVE
Debian CVE
added 2023/09/15 6:37 p.m.34 views

CVE-2023-36479

Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, th...

3.5CVSS6AI score0.01383EPSS
Exploits1
CNNVD
CNNVD
added 2023/09/15 12:0 a.m.2 views

Eclipse Jetty Security Vulnerability

Eclipse Jetty is an open source, Java-based Web server and Java Servlet container from the Eclipse Foundation. A security vulnerability exists in the Eclipse Jetty Canonical Repository that stems from allowing Servlet users with a very specific command structure to execute incorrect commands...

3.5CVSS7.1AI score0.01383EPSS
Exploits1References10
Rows per page
Query Builder