Lucene search
+L

70 matches found

RedHat Linux
RedHat Linux
added 2020/12/16 12:11 p.m.10 views

camel: DNS Rebinding in JMX Connector could result in remote command execution

Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0...

7.5CVSS7.1AI score0.13959EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/11/19 12:00 a.m.10 views

Cisco DNA Spaces Connector Command Injection Vulnerability

Cisco DNA Spaces: Connector is used to connect Cisco DNA Spaces to a Cisco wireless controller. A command injection vulnerability exists in the Web management interface of the Cisco DNA Spaces Connector version 2.2 and earlier. The vulnerability stems from insufficient validation of user-supplied...

10CVSS8.2AI score0.0248EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/06/19 12:00 a.m.11 views

The vulnerability of the AJP Connector service of the Apache Tomcat application server allows a hacker to gain unauthorized access to read files within web applications.

The vulnerability of the AJP Connector service of the Apache Tomcat application server is related to access control deficiencies. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized read access to files within the web applications...

7.8CVSS6.9AI score0.04837EPSS
SaveExploits0References6Affected Software6
RedHat Linux
RedHat Linux
added 2020/06/04 1:11 p.m.8 views

tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability

CVE-2020-1938 is a file read/inclusion vulnerability in the AJP connector in Apache Tomcat. This is enabled by default with a default configuration port of 8009. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instance...

9.8CVSS7.5AI score0.9927EPSS
SaveExploits49References11
OSV
OSV
added 2019/11/26 4:15 a.m.9 views

CVE-2019-15996

A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient restrictions during the execution of an affected CLI command. An...

6.7CVSS6.9AI score0.00518EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/21 12:00 a.m.13 views

Cisco DNA Spaces:Connector Input Validation Error Vulnerability

Cisco DNA Spaces is a set of indoor location services platform from Cisco.Cisco DNA Spaces:Connector is one of the connectors used to support the communication of Cisco wireless controllers. An input validation error vulnerability exists in versions prior to Cisco DNA Spaces: Connector 2.0, which...

7.2CVSS7.3AI score0.00729EPSS
SaveExploits0References1
Veracode
Veracode
added 2019/09/02 12:46 a.m.23 views

Directory Traversal

mule-http-connector is vulnerable to directory traversal. The vulnerability exists as it allows serving of static resources that are out of its base path...

7.5CVSS4.3AI score0.02998EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2016/10/25 2:31 p.m.15 views

CVE-2016-5598

Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python...

5.6CVSS5.8AI score
SaveExploits0References3
NVD
NVD
added 2011/04/08 3:17 p.m.33 views

CVE-2011-1475

The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for...

5CVSS4.3AI score0.0869EPSS
SaveExploits0References12
myhack58
myhack58
added 2010/06/19 12:00 a.m.22 views

ShopWind online shop system upload vulnerability-vulnerability warning-the black bar safety net

ShopWind online shop system based on Make on the market the best online shop System,Long-term to provide customers with quality the online systems services,as network operators to create the greatest value! Why do we call Shopwind,we hope that our online shop system running like the wind as...

0.4AI score
SaveExploits0
Rows per page
Query Builder