Lucene search
+L

246 matches found

Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•115 views

Caucho Resin >=4.0.52 <=4.0.56 - Directory traversal

There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request. id: CVE-2021-44138 info: name: Caucho Resin =4.0.52 =4.0.56 - Directory travers...

7.5CVSS7.4AI score0.12327EPSS
SaveExploits1References2
NVD
NVD
•added 2026/09/18 8:16 p.m.•5 views

CVE-2017-20284

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS0.00958EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/18 7:00 p.m.•8 views

EUVD-2017-19014

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS6AI score0.00958EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/18 7:00 p.m.•9 views

CVE-2017-20284 Caucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig Servlet

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS6AI score0.00958EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/18 7:00 p.m.•37 views

CVE-2017-20284 Caucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig Servlet

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS0.00958EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/18 7:00 p.m.•13 views

CVE-2017-20284

Caucho Resin contains a path traversal vulnerability in the resin-doc documentation webapp, specifically through the jndi-appconfig tutorial servlet. By supplying directory traversal sequences in the inputFile request parameter, remote unauthenticated attackers can read arbitrary files outside th...

8.7CVSS6AI score0.00958EPSS
SaveIn wildExploits0References4
VulnCheck KEV
VulnCheck KEV
•added 2026/09/18 12:00 a.m.•11 views

VulnCheck KEV: CVE-2017-20284

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS6AI score0.00958EPSS
SaveIn wildExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•1 views

CVE-2017-20284: Improper Limitation of a Pathname to a Restricted Directory

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS6AI score0.00958EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
•added 2026/07/27 7:01 a.m.•33 views

A week in security (July 20 &#8211; July 26)

Last week on Malwarebytes Labs: Don’t get fooled by TikTok resin art scams Call of Duty Mobile scam uses fake free points to steal player accounts OpenAI’s agent escaped its sandbox during a security test Google wants to store a selfie video of your face Beyond the Play Store: How Android threats...

5.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•9 views

MiracleLinux 3 : resin-3.1.9-1AXS3 (AXSA:2009-48:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2009-48:01 advisory. Resin Open Source provides JSP, Servlet, and EJB functionality under the GPL license. Fixed bugs: CVE-2008-2462 Cross-site scripting XSS vulnerability in the...

4.3CVSS5.7AI score0.02849EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2006-1953

Malware in sbrugna...

7.8CVSS6.3AI score0.02693EPSS
SaveExploits1References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2008-2457

Malware in sbrugna...

4.3CVSS6.3AI score0.02849EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2006-2439

Malware in sbrugna...

5CVSS6.4AI score0.0243EPSS
SaveExploits1References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2014-2988

Malware in sbrugna...

5CVSS6.4AI score0.01665EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2012-2946

Malware in sbrugna...

5CVSS6.4AI score0.03488EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2004-0280

Malware in sbrugna...

5CVSS6.4AI score0.01531EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2000-1206

Malware in sbrugna...

5CVSS6.4AI score0.02865EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2010-2052

Malware in sbrugna...

4.3CVSS6.3AI score0.03356EPSS
SaveExploits3References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2002-2069

Malware in sbrugna...

5CVSS6.3AI score0.01678EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2002-1969

Malware in sbrugna...

5CVSS6.4AI score0.02154EPSS
SaveExploits0References4
Rows per page
Query Builder