Lucene search
+L

715 matches found

RedhatCVE
RedhatCVE
added 2023/09/18 6:25 a.m.72 views

CVE-2023-41081

A vulnerability was found in Apache Tomcat Connectors modjk. Affected versions of this package are vulnerable to information exposure in the modjk component. This flaw allows an attacker to exploit the implicit mapping functionality, resulting in the unintended exposure of the status worker and...

7.5CVSS7.2AI score0.01257EPSS
SaveExploits0References4
NVD
NVD
added 2023/09/13 10:15 a.m.18 views

CVE-2023-41081

Important: Authentication Bypass CVE-2023-41081 The modjk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, modjk would use an...

7.5CVSS7.7AI score0.01257EPSS
SaveExploits0References4
OSV
OSV
added 2023/09/13 10:15 a.m.2 views

DEBIAN-CVE-2023-41081

Important: Authentication Bypass CVE-2023-41081 The modjk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, modjk would use an...

7.5CVSS7.1AI score0.01257EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/13 10:15 a.m.19 views

Authentication flaw

Important: Authentication Bypass CVE-2023-41081 The modjk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, modjk would use an...

5CVSS7.6AI score0.01257EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/09/13 10:15 a.m.13 views

UBUNTU-CVE-2023-41081

Important: Authentication Bypass CVE-2023-41081 The modjk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, modjk would use an...

7.5CVSS5.7AI score0.01257EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2023/09/13 10:15 a.m.39 views

CVE-2023-41081

Important: Authentication Bypass CVE-2023-41081 The modjk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, modjk would use an...

7.5CVSS6.8AI score0.01257EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2023/09/13 9:30 a.m.53 views

CVE-2023-41081 Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request

Important: Authentication Bypass CVE-2023-41081 The modjk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, modjk would use an...

7.9AI score0.01257EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2023/09/13 9:30 a.m.27 views

CVE-2023-41081

Important: Authentication Bypass CVE-2023-41081 The modjk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, modjk would use an...

7.5CVSS7.6AI score0.01257EPSS
SaveExploits0
OSV
OSV
added 2023/09/13 9:30 a.m.6 views

CVE-2023-41081 Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request

Important: Authentication Bypass CVE-2023-41081 The modjk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, modjk would use an...

7.5CVSS6.9AI score0.01257EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2023/09/13 9:30 a.m.16 views

CVE-2023-41081 Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request

Important: Authentication Bypass CVE-2023-41081 The modjk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, modjk would use an...

7.6AI score0.01257EPSS
SaveExploits0References4
CVE
CVE
added 2023/09/13 9:30 a.m.164 views

CVE-2023-41081

The CVE-2023-41081 issue affects the mod_jk component of Apache Tomcat Connectors (not the ISAPI redirector). In configurations that enable ForwardDirectories without explicit mounts for all proxied requests, mod_jk could map to the first defined worker via implicit mapping, exposing the status w...

7.5CVSS7.6AI score0.01257EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/11 12:0 a.m.8 views

PT-2023-5210 · Apache +5 · Apache Tomcat Connectors +5

Name of the Vulnerable Software and Affected Versions: Apache Tomcat Connectors versions 1.2.0 through 1.2.48 Description: The mod jk component of Apache Tomcat Connectors is affected by an issue where, in certain circumstances, such as when a configuration includes "JkOptions +ForwardDirectories...

7.8CVSS6.6AI score0.02242EPSS
SaveExploits5References70
BDU FSTEC
BDU FSTEC
added 2023/08/23 12:0 a.m.11 views

The vulnerability of Google Chrome browser’s Device Trust Connectors allows a perpetrator to execute arbitrary code.

The vulnerability of Google Chrome’s Device Connectors component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

10CVSS8.1AI score0.00829EPSS
SaveExploits0References9Affected Software6
Veracode
Veracode
added 2023/08/22 4:20 p.m.31 views

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the Device Trust Connectors, which allows an attacker to cause heap corruption via a maliciously crafted HTML page...

8.8CVSS6.9AI score0.00829EPSS
SaveExploits0References7Affected Software1
Citrix
Citrix
added 2023/08/22 12:0 a.m.23 views

Cloud connector disconnected - event id 514

In a resource location with multiple cloud connectors, some of them show as "disconnected" in Citrix Cloud or the Cloud Dashboard page. Other Connectors do not display the problem. All Cloud Connectors in the same VLAN. Cloud Connector Connectivity Check Utility does not detect any problems with...

7.2AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2023/08/21 7:0 a.m.55 views

Chromium: CVE-2023-4349 Use after free in Device Trust Connectors

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.00829EPSS
SaveExploits0
NVD
NVD
added 2023/08/15 6:15 p.m.24 views

CVE-2023-4349

Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9AI score0.00829EPSS
SaveExploits0References6
OSV
OSV
added 2023/08/15 6:15 p.m.1 views

DEBIAN-CVE-2023-4349

Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.4AI score0.00829EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2023/08/15 6:15 p.m.30 views

CVE-2023-4349

Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.2AI score0.00829EPSS
SaveExploits0References3
Prion
Prion
added 2023/08/15 6:15 p.m.26 views

Design/Logic Flaw

Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

6.8CVSS8.8AI score0.00829EPSS
SaveExploits0References6Affected Software3
Rows per page
Query Builder