Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

4847 matches found

Mend
Mend•added 2023/09/15 6:37 p.m.•7 views

CVE-2023-36479

Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, th...

3.5CVSS0.01162EPSS
SaveExploits1References10
Debian CVE
Debian CVE•added 2023/09/15 6:37 p.m.•71 views

CVE-2023-36479

Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, th...

3.5CVSS6AI score0.01162EPSS
SaveExploits1
CNNVD
CNNVD•added 2023/09/15 12:00 a.m.•15 views

Eclipse Jetty Security Vulnerability

Eclipse Jetty is an open source, Java-based web server and Java Servlet container from the Eclipse Foundation. A security vulnerability exists in Eclipse Jetty that originates from rejecting a request and returning a 400 response...

5.3CVSS6.8AI score0.01279EPSS
SaveExploits0References12
CNNVD
CNNVD•added 2023/09/15 12:00 a.m.•7 views

Eclipse Jetty Security Vulnerability

Eclipse Jetty is an open source, Java-based web server and Java Servlet container from the Eclipse Foundation. A security vulnerability exists in Eclipse Jetty. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

4.3CVSS6.6AI score0.00921EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC•added 2023/09/15 12:00 a.m.•30 views

SslConnections Component DoS

The vulnerability of the SslConnections component in Eclipse Jetty servers is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.8CVSS6.7AI score0.02178EPSS
SaveExploits1References5Affected Software3
BDU FSTEC
BDU FSTEC•added 2023/09/15 12:00 a.m.•25 views

Eclipse Jetty Information Disclosure

The vulnerability of the concat server servlet in Eclipse Jetty is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information remotely...

5.3CVSS6.6AI score0.7848EPSS
SaveExploits3References9Affected Software9
CNNVD
CNNVD•added 2023/09/15 12:00 a.m.•12 views

Eclipse Jetty Security Vulnerability

Eclipse Jetty is an open source, Java-based Web server and Java Servlet container from the Eclipse Foundation. A security vulnerability exists in the Eclipse Jetty Canonical Repository that stems from allowing Servlet users with a very specific command structure to execute incorrect commands...

3.5CVSS7.1AI score0.01162EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2023/09/15 12:00 a.m.•7 views

CVE-2023-36479: Improper Neutralization of Quoting Syntax

Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, th...

3.5CVSS6.1AI score0.01162EPSS
SaveExploits1References2
vulnersOsv
vulnersOsv•added 2023/09/14 4:16 p.m.•2 views

org.eclipse.jetty.documentation:jetty-documentation (>=12.0.0.alpha0, <=12.0.0.beta1), org.eclipse.jetty.ee10.demos:jetty-ee10-demo-embedded (>=12.0.0.alpha0, <=12.0.0.beta1) +4 more potentially affected by CVE-2023-36479 via org.eclipse.jetty.ee10:jetty-ee10-servlets (>=12.0.0.alpha0, <=12.0.0.beta1)

org.eclipse.jetty.ee10:jetty-ee10-servlets MAVEN version =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.beta1 Source cves: CVE-2023-36479 Source advisory: OSV:GHSA-3GH6-V5V9-6V9J...

3.5CVSS0.01162EPSS
SaveExploits1
Positive Technologies
Positive Technologies•added 2023/09/14 12:00 a.m.•22 views

PT-2023-9272

Name of the Vulnerable Software and Affected Versions Eclipse Jetty versions prior to 9.4.52 Eclipse Jetty versions prior to 10.0.16 Eclipse Jetty versions prior to 11.0.16 Eclipse Jetty versions prior to 12.0.0-beta2 Description The issue is related to the formation of a command line that contai...

4.3CVSS7.7AI score0.01162EPSS
SaveExploits1References254
IBM Security Bulletins
IBM Security Bulletins•added 2023/09/13 7:32 a.m.•38 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Application Performance Management products

Summary IBM Java SDK is used by IBM Application Performance Management. Vulnerability Details CVEID:CVE-2023-30441 DESCRIPTION: IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws...

9.1CVSS8.8AI score0.03328EPSS
SaveExploits1Affected Software1
RedhatCVE
RedhatCVE•added 2023/09/12 7:54 p.m.•57 views

CVE-2023-4759

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

8.8CVSS7.6AI score0.02194EPSS
SaveExploits0References3
osv_debian
osv_debian•added 2023/09/12 10:15 a.m.•8 views

DEBIAN-CVE-2023-4759

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

8.8CVSS7.5AI score0.02194EPSS
SaveExploits0References1
NVD
NVD•added 2023/09/12 10:15 a.m.•34 views

CVE-2023-4759

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

8.8CVSS8.8AI score0.02194EPSS
SaveExploits0References3
Prion
Prion•added 2023/09/12 10:15 a.m.•54 views

Design/Logic Flaw

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

6.5CVSS8.7AI score0.02194EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve•added 2023/09/12 10:15 a.m.•41 views

CVE-2023-4759

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

8.8CVSS7.3AI score0.02194EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu•added 2023/09/12 10:15 a.m.•18 views

UBUNTU-CVE-2023-4759

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

8.8CVSS7.5AI score0.02194EPSS
SaveExploits0References6
CVE
CVE•added 2023/09/12 9:12 a.m.•241 views

CVE-2023-4759

CVE-2023-4759 (Eclipse JGit) affects all versions

8.8CVSS7.6AI score0.02194EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2023/09/12 9:12 a.m.•51 views

CVE-2023-4759 Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

8.8CVSS9AI score0.02194EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2023/09/12 9:12 a.m.•31 views

CVE-2023-4759 Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

8.8CVSS7.6AI score0.02194EPSS
SaveExploits0References3
Rows per page
Query Builder