Lucene search
K

2549 matches found

F5 Networks
F5 Networks
added 2016/11/28 12:0 a.m.61 views

SOL43167094 - Apache Struts 2 vulnerability CVE-2016-6795

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

9.8CVSS2.8AI score0.08438EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.26 views

Apache Struts DoS Vulnerability (S2-041) - Linux

Apache Struts is prone to a Denial of Service DoS vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

5.3CVSS5.6AI score0.10638EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.30 views

Apache Struts Unspecified Vulnerability (S2-035) - Linux

Apache Struts is prone to an unspecified vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.8CVSS8.9AI score0.06779EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.46 views

Apache Struts Multiple Vulnerabilities (S2-037, S2-038, S2-039, S2-040) - Linux

Apache Struts is prone to multiple vulnerabilities. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.8CVSS8.4AI score0.17171EPSS
Exploits2References8
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.18 views

Apache Struts Security Update (S2-041)

Apache Struts is prone to a Denial of Service DoS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

5.3CVSS5.5AI score0.10638EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.27 views

Apache Struts 1.x - 1.3.10 Multiple Vulnerabilities - Windows

Apache Struts is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.2CVSS8.3AI score0.2593EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.44 views

Apache Struts Security Update (S2-037, S2-038, S2-039, S2-040)

Apache Struts is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.2AI score0.17171EPSS
Exploits2References12
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.35 views

Apache Struts 1.x - 1.3.10 Multiple Vulnerabilities - Linux

Apache Struts is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.2CVSS8.3AI score0.2593EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.34 views

Apache Struts Security Update (S2-035)

Apache Struts is prone to an unspecified vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

9.8CVSS9.5AI score0.06779EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2016/10/27 12:0 a.m.64 views

Apache Struts 2.3.1 < 2.3.31 / 2.5.x < 2.5.5 Convention Plugin Path Traversal RCE (S2-042)

The version of Apache Struts running on the remote host is 2.3.1 prior to 2.3.31 or 2.5.x prior to 2.5.5. It is, therefore, affected by a remote code execution vulnerability in the Convention plugin due to a flaw that allows traversing outside of a restricted path. An unauthenticated, remote...

9.8CVSS9.4AI score0.08438EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2016/10/26 12:0 a.m.62 views

IBM WebSphere Application Server 7.0 < 7.0.0.33 Multiple Vulnerabilities

Binary data 9699.prm...

7.8CVSS7.2AI score0.95821EPSS
Exploits16References17
CNVD
CNVD
added 2016/10/20 12:0 a.m.3 views

Apache Struts Convention Plugin Path Traversal Vulnerability

Struts2 is an extensible framework for building enterprise-class Jave Web applications. Struts 2.3.20 - 2.3.31 has a path traversal vulnerability in the Convention plugin, which can be exploited by an attacker to conduct path traversal and code execution attacks on the server side via a construct...

9.8CVSS9.4AI score0.08438EPSS
Exploits0References1
Symantec
Symantec
added 2016/10/17 12:0 a.m.44 views

Novell NetIQ Sentinel CVE-2016-1000031 Remote Code Execution Vulnerability

Description Novell NetIQ Sentinel is prone to a security vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Novell NetIQ Sentinel version 7.4x are vulnerable. Technologies Affected Apache Commons FileUpload 1.0...

7.5CVSS0.8AI score0.34731EPSS
Exploits0References2Affected Software50
NVD
NVD
added 2016/10/03 3:59 p.m.19 views

CVE-2016-4436

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

9.8CVSS9.6AI score0.06779EPSS
Exploits0References5
OSV
OSV
added 2016/10/03 3:59 p.m.5 views

CVE-2016-4436

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

9.8CVSS9.6AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2016/10/03 3:59 p.m.31 views

CVE-2016-4436

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

9.8CVSS7.2AI score0.06779EPSS
Exploits0References2
Prion
Prion
added 2016/10/03 3:59 p.m.25 views

Input validation

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

7.5CVSS7.3AI score0.06779EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2016/10/03 3:0 p.m.89 views

CVE-2016-4436

Summary of CVE-2016-4436 : Apache Struts 2 is affected by an unspecified impact vulnerability due to improper action name cleanup. The CVE entry covers versions 2.3. before 2.3.29 and 2.5.x before 2.5.1. Connected IBM and IBM-related advisories explicitly reference this CVE and reiterate that upg...

9.8CVSS8.5AI score0.06779EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2016/10/03 3:0 p.m.25 views

CVE-2016-4436

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

8.7AI score0.06779EPSS
Exploits0References5
CNVD
CNVD
added 2016/08/02 12:0 a.m.2 views

Struts2 devMode Remote Command Execution Vulnerability in Chengdu Konsai Information Technology Co.

TeachCloud Resource Platform is an education informatization product for China's compulsory education education management institutions and schools, aiming at realizing regional or intra-school resource sharing and promoting the application of resources for "teaching" and "learning". The product...

8.5AI score
Exploits0References1
Rows per page
Query Builder