4281 matches found
Eclipse Jetty Cross-Site Scripting Vulnerability (CNVD-2019-42378)
Eclipse Jetty is the Eclipse Foundation of an open source , Java-based Web server and Java Servlet container . A cross-site scripting vulnerability exists in the JSP Dump and Session Dump Servlets in Eclipse Jetty versions prior to 6.1.22. The vulnerability stems from a lack of proper validation ...
HP Printers Multiple Vulnerabilities (HPSBPI03630)
A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Eclipse Jetty Information Disclosure Vulnerability
Eclipse Jetty is the Eclipse Foundation of an open source , Java-based Web server and Java Servlet container . An information disclosure vulnerability exists in Dump Servlet in Eclipse Jetty versions prior to 6.1.22. The vulnerability stems from errors such as configuration during operation of a...
CVE-2019-6337
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device...
CVE-2019-6337
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device...
Code injection
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device...
CVE-2019-6337
CVE-2019-6337 affects HP Inkjet printers via a maliciously crafted print file that can cause the device to assert and emit a core dump to a local device. Public details in HP’s advisory HPSBPI03630 (HP Inkjet Printers - Buffer Overflow and Local Disclosure of Information) confirm a Buffer Overflo...
CVE-2009-5046
JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22...
Design/Logic Flaw
JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22...
CVE-2009-5046
JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22...
CVE-2009-5045
Dump Servlet information leak in jetty before 6.1.22...
CVE-2009-5046
CVE-2009-5046 affects Jetty (JSP Dump and Session Dump Servlets) with XSS due to improper validation in the JSP Dump and Session Dump Servlets, observed in Jetty versions before 6.1.22. The vulnerability enables cross-site scripting that can steal cookie-based credentials when a page using the af...
CVE-2009-5048
Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20...
Cross site scripting
Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20...
CVE-2009-5048
Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20...
CVE-2009-5048
Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20...
CVE-2009-5048
Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20...
CVE-2009-5048
CVE-2009-5048 is a stored XSS in the Jetty project, specifically the Cookie Dump Servlet, affecting Jetty 6.1.x up to 6.1.20. The root cause is improper validation of user-supplied input in the Cookie Dump Servlet, enabling an attacker to inject script that could access cookie-based credentials. ...
kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping
A flaw was found in the Linux kernel where the coredump implementation does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs. This allows local users to obtain sensitive information, cause a denial of service DoS, or possibly have unspecified other impa...
kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping
A flaw was found in the Linux kernel where the coredump implementation does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs. This allows local users to obtain sensitive information, cause a denial of service DoS, or possibly have unspecified other impa...