Lucene search
+L

885 matches found

Github Security Blog
Github Security Blog
added 2025/10/27 6:31 p.m.17 views

Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences

Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a specially crafted URL to inject ANSI escape sequences to manipulate the console...

9.6CVSS6.9AI score0.10137EPSS
SaveExploits0References11Affected Software3
OSV
OSV
added 2025/10/27 6:23 p.m.7 views

JLSEC-2025-194 wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape...

wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked. There may be plausible...

3.3CVSS6.5AI score0.02242EPSS
SaveExploits3References18
NVD
NVD
added 2025/10/27 6:15 p.m.18 views

CVE-2025-55754

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an...

9.6CVSS0.10137EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/27 5:29 p.m.7 views

CVE-2025-55754 Apache Tomcat: console manipulation via escape sequences in log messages

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an...

6.5AI score0.10137EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/27 5:29 p.m.279 views

CVE-2025-55754 Apache Tomcat: console manipulation via escape sequences in log messages

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an...

0.10137EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2025/10/27 5:29 p.m.20 views

CVE-2025-55754

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an...

9.6CVSS8.5AI score0.10137EPSS
SaveExploits0
OSV
OSV
added 2025/10/27 5:29 p.m.11 views

CVE-2025-55754 Apache Tomcat: console manipulation via escape sequences in log messages

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an...

9.6CVSS7.2AI score
SaveExploits0References5
CVE
CVE
added 2025/10/27 5:29 p.m.148 views

CVE-2025-55754

CVE-2025-55754 affects Apache Tomcat: improper neutralization of ANSI escape sequences in log messages could enable console/clipboard manipulation via crafted URLs. Affected: Tomcat 11.x (11.0.0-M1 to 11.0.10), 10.x (10.1.0-M1 to 10.1.44), 9.x (9.0.40 to 9.0.108), plus some EOL versions. Remediat...

9.6CVSS6.5AI score0.10137EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2025/10/27 5:29 p.m.13 views

EUVD-2025-36225

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an...

6.4AI score0.10137EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/27 12:00 a.m.15 views

Apache Tomcat 11.0.0.M1 < 11.0.11 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 11.0.11. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat11.0.11security-11 advisory. - Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regressi...

9.6CVSS7.1AI score0.66535EPSS
SaveExploits4References6
Tenable Nessus
Tenable Nessus
added 2025/10/27 12:00 a.m.10 views

Apache Tomcat 10.1.0.M1 < 10.1.45 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.45. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.45security-10 advisory. - Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regressi...

9.6CVSS7.1AI score0.66535EPSS
SaveExploits4References6
Tenable Nessus
Tenable Nessus
added 2025/10/27 12:00 a.m.8 views

Apache Tomcat 9.0.0.M11 < 9.0.109 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 9.0.109. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat9.0.109security-9 advisory. - Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regressio...

7.5CVSS7.1AI score0.66535EPSS
SaveExploits4References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-20180

Malware in sbrugna...

8.8CVSS8.6AI score0.04089EPSS
SaveExploits1References23
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2014-8007

Malware in sbrugna...

8.8CVSS8.6AI score0.03703EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2006-0550

Malware in sbrugna...

5CVSS6.4AI score0.0124EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2014-3141

Malware in sbrugna...

7.6CVSS6AI score0.041EPSS
SaveExploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2010-0034

Malware in sbrugna...

2.1CVSS6.1AI score0.0068EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2007-4747

Malware in sbrugna...

7.5CVSS6AI score0.0416EPSS
SaveExploits0References48
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2004-2570

Malware in sbrugna...

7.5CVSS6.4AI score0.0213EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2012-4022

Malware in sbrugna...

8.5CVSS6.4AI score0.03544EPSS
SaveExploits0References4
Rows per page
Query Builder