99 matches found
jetty_9.4.31_CVE-2023-26048
Eclipse Jetty Canonical Repository 这是 Jetty 项目的官方仓库，欢迎随时 fork 并贡献代码！ 想提交补丁或拉取请求？ 请确保你已登记 Eclipse 贡献者协议（ECA）。 eclipse.org/legal/ecafaq 项目描述 Jetty 是一款轻量级、高度可扩展的基于 Java 的 Web 服务器和 Servlet 引擎。 我们的目标是以高吞吐量、低延迟的方式支持 HTTP、HTTP/2 和 WebSocket 等 Web 协议，在提供最大性能的同时，保留多年 Servlet 开发积累的易用性和兼容性。 Jetty 是一款现代的全异步...
jetty_9.4.31_CVE-2021-34428
Eclipse Jetty 官方仓库 这是 Jetty 项目的官方仓库，欢迎 fork 并贡献！ 提交补丁或拉取请求？ 请确保您有一份有效的 Eclipse 贡献者协议 ECA。 eclipse.org/legal/ecafaq 项目描述 Jetty 是一个轻量级、高可扩展性的基于 Java 的 Web 服务器和 Servlet 引擎。 我们的目标是以高吞吐量、低延迟的方式支持 HTTP、HTTP/2 和 WebSocket 等 Web 协议，在保持易用性和与多年 Servlet 开发兼容性的同时，提供最佳性能。 Jetty 是一个现代的全异步 Web...
CVE-2026-56122
Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with dot-dot-slash sequences that are not sanitized when serving static files from the configured webroot. Attackers can traver...
EUVD-2026-39397
Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with dot-dot-slash sequences that are not sanitized when serving static files from the configured webroot. Attackers can traver...
CVE-2026-56122
Winstone Servlet Engine up to version 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with dot-dot-slash sequences not sanitized when serving static files from the configured webroot. Attackers can traverse ...
PT-2026-52437
Name of the Vulnerable Software and Affected Versions Winstone Servlet Engine versions prior to 0.9.11 Description A path traversal flaw exists when serving static files from the configured webroot. Unauthenticated attackers can read arbitrary files accessible to the servlet engine process,...
CLSA-2026-1775646020 Update of pki-servlet-engine
Bump release...
CLSA-2026-1769701085 pki-servlet-engine: Fix of CVE-2025-31651
CVE-2025-31651: fix improper neutralization of escape, meta or control sequences to avoid bypassing rewrite rules...
CLSA-2026-1768989206 pki-servlet-engine: Fix of CVE-2025-55752
CVE-2025-55752: fix improper normalization in RewriteValve to prevent path traversal attacks...
RHSA-2026:0293 Red Hat Security Advisory: pki-servlet-engine security update
Bulletin has no description...
RHSA-2026:0292 Red Hat Security Advisory: pki-servlet-engine security update
Bulletin has no description...
MiracleLinux 9 : pki-servlet-engine-9.0.50-1.el9_2.2 (AXSA:2025-10718:01)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10718:01 advisory. tomcat: RCE due to TOCTOU issue in JSP compilation CVE-2024-50379 Tenable has extracted the preceding description block directly from the MiracleLinux...
Important: Red Hat Security Advisory: pki-servlet-engine security update
An update for pki-servlet-engine is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Important: Red Hat Security Advisory: pki-servlet-engine security update
An update for pki-servlet-engine is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
EUVD-2009-3089
Malware in sbrugna...
EUVD-2011-0341
Malware in sbrugna...
EUVD-2008-4094
Malware in sbrugna...
EUVD-2009-2084
Malware in sbrugna...