Lucene search
+L

318 matches found

OSV
OSV
added 2023/10/10 6:31 p.m.5 views

GHSA-G8PJ-R55Q-5C2V Apache Tomcat Incomplete Cleanup vulnerability

Incomplete Cleanup vulnerability in Apache Tomcat. When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recyclin...

5.3CVSS7AI score0.0216EPSS
SaveExploits1References12
Github Security Blog
Github Security Blog
added 2023/10/10 6:31 p.m.57 views

Apache Tomcat Incomplete Cleanup vulnerability

Incomplete Cleanup vulnerability in Apache Tomcat. When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recyclin...

5.3CVSS7.4AI score0.0216EPSS
SaveExploits1References12Affected Software4
Github Security Blog
Github Security Blog
added 2023/10/10 6:31 p.m.34 views

Apache Tomcat Incomplete Cleanup vulnerability

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened ...

5.9CVSS6.7AI score0.01854EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/10/10 6:15 p.m.10 views

DEBIAN-CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

5.3CVSS7AI score0.0216EPSS
SaveExploits1References1
NVD
NVD
added 2023/10/10 6:15 p.m.21 views

CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened ...

5.9CVSS6.4AI score0.01854EPSS
SaveExploits0References2
NVD
NVD
added 2023/10/10 6:15 p.m.37 views

CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

5.3CVSS6.4AI score0.0216EPSS
SaveExploits1References6
Prion
Prion
added 2023/10/10 6:15 p.m.43 views

Input validation

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened ...

2.6CVSS7.3AI score0.01854EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/10/10 6:15 p.m.38 views

Input validation

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

5CVSS6.1AI score0.0216EPSS
SaveExploits1References6Affected Software2
OSV
OSV
added 2023/10/10 6:15 p.m.11 views

UBUNTU-CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened ...

5.9CVSS6.9AI score0.01854EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2023/10/10 6:15 p.m.100 views

CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

5.3CVSS6.8AI score0.0216EPSS
SaveExploits1References6
OSV
OSV
added 2023/10/10 6:15 p.m.5 views

UBUNTU-CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

5.3CVSS6.9AI score0.0216EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2023/10/10 5:42 p.m.33 views

CVE-2023-42795 Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

7.6AI score0.0216EPSS
SaveExploits1References1
OSV
OSV
added 2023/10/10 5:42 p.m.48 views

CVE-2023-42795 Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

5.3CVSS6.7AI score
SaveExploits0References8
Debian CVE
Debian CVE
added 2023/10/10 5:17 p.m.49 views

CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened ...

5.9CVSS6.7AI score0.01854EPSS
SaveExploits0
CVE
CVE
added 2023/10/10 5:17 p.m.341 views

CVE-2023-42794

CVE-2023-42794 is an Incomplete Cleanup vulnerability in Apache Tomcat’s internal Commons FileUpload fork. It affects Tomcat 9.0.70–9.0.80 and 8.5.85–8.5.93; a partially refactored, unreleased code path could leave an uploaded file stream open if not closed, causing the file to remain on disk and...

5.9CVSS6.5AI score0.01854EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/10/10 5:17 p.m.22 views

CVE-2023-42794 Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened ...

6.8AI score
SaveExploits0References4
Cvelist
Cvelist
added 2023/10/10 5:17 p.m.36 views

CVE-2023-42794 Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened ...

6.4AI score0.01854EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/10/10 12:0 a.m.20 views

PT-2023-6027

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.0-M11 Apache Tomcat versions 10.1.0-M1 through 10.1.13 Apache Tomcat versions 9.0.0-M1 through 9.0.80 Apache Tomcat versions 8.5.0 through 8.5.93 Description The issue is related to an Incomplete...

10CVSS7.1AI score0.99999EPSS
SaveExploits119References178
BDU FSTEC
BDU FSTEC
added 2023/08/21 12:0 a.m.9 views

The vulnerability of server software like HAProxy arises from incomplete cleanup of temporary or auxiliary resources, allowing attackers to gain access to confidential data.

The vulnerability of server software like HAProxy is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

7.8CVSS7.2AI score0.01201EPSS
SaveExploits0References11Affected Software4
OSV
OSV
added 2023/05/10 2:15 p.m.43 views

CVE-2022-40974

Incomplete cleanup in the IntelR IPP Cryptography software before version 2021.6 may allow a privileged user to potentially enable information disclosure via local access...

5.5CVSS6.4AI score
SaveExploits0References1
Rows per page
Query Builder