CVE-2017-5651

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in t...

CVE-2017-5651

CVE-2017-5651 concerns Apache Tomcat 9.0.0.M1–9.0.0.M18 and 8.5.0–8.5.12, where a refactoring of HTTP connectors caused a regression in the send-file processing. If processing completes quickly, the same Processor could be added to the processor cache twice, potentially using the same Processor f...

CVE-2017-5651

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in t...

CVE-2016-6808

Buffer overflow in Apache Tomcat Connectors modjk before 1.2.42...

Buffer overflow

Buffer overflow in Apache Tomcat Connectors modjk before 1.2.42...

CVE-2016-6808

Buffer overflow in Apache Tomcat Connectors modjk before 1.2.42...

CVE-2016-6808

CVE-2016-6808 affects the Apache Tomcat Connectors (mod_jk). Affected component: mod_jk (C connector for Tomcat) with a buffer overflow vulnerability in versions before 1.2.42. Root cause indicated as a buffer overflow in the connector, leading to potential impact on confidentiality, integrity, a...

CVE-2016-6808

Buffer overflow in Apache Tomcat Connectors modjk before 1.2.42...

Fixed in Apache Tomcat 8.5.13

Important: Information Disclosure CVE-2017-5651 The refactoring of the HTTP connectors for 8.5.x onwards, introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could resu...

MODX Revolution Directory Traversal Vulnerability (CNVD-2016-13240)

MODX Revolution is a PHP-based open source content management system CMS from the U.S. company MODX. The system supports online collaboration, search engine optimization SEO, add-ons and more. A directory traversal vulnerability exists in the /connectors/index.php file in versions of MODX...

MODX Revolution Directory Traversal Vulnerability (CNVD-2016-13239)

MODX Revolution is a PHP-based open source content management system CMS from the U.S. company MODX. The system supports online collaboration, search engine optimization SEO, add-ons and more. A directory traversal vulnerability exists in the /connectors/index.php file in versions of MODX...

MODX Revolution Directory Traversal Vulnerability

MODX Revolution is a PHP-based open source content management system CMS from the U.S. company MODX. The system supports online collaboration, search engine optimization SEO, add-ons and more. A directory traversal vulnerability exists in the /connectors/index.php file in versions of MODX...

CVE-2016-10038

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/remove...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Apache Archiva 1.3.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add new repository proxy connectors via the token parameter to admin/addProxyConnectorcommit.action, 2 new...

FreeBSD : mod_jk -- information disclosure (47aa4343-44fa-11e5-9daa-14dae9d210b8)

NIST reports : Apache Tomcat Connectors modjk before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

FCKeditor Connectors Arbitrary File Upload Vulnerability

Web applications providing wrong configured FCKeditor connectors might be prone to an arbitrary-file-upload vulnerability. Copyright C 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Micro:bit — A Pocket-sized Programmable Computer

The BBC has unveiled the final design of the Micro:bit — a pocket-sized computer board designed to lure U.K. school children to embedded electronics. The Micro:bit is essentially a codeable computer that lets kids get creative with technology. It measures 5cm by 4cm and will be available in...

Apache Tomcat Connectors Information Disclosure Vulnerability

Apache Tomcat is a free open source Java Servlet and JSP service program maintained by the Apache Foundation. An information disclosure vulnerability exists in Apache Tomcat Connectors versions prior to 1.2.41. It allows remote attackers to disclose restricted data via unspecified vectors...

CVE-2014-8111

Apache Tomcat Connectors modjk before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors...

CVE-2014-8111

Apache Tomcat Connectors modjk before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors...