Lucene search
+L

2603 matches found

Prion
Prion
added 2016/07/04 10:59 p.m.25 views

Cross site request forgery (csrf)

Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request...

5CVSS7AI score0.09755EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2016/07/04 10:00 p.m.46 views

CVE-2016-4433

Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request...

8.1AI score0.09755EPSS
SaveExploits0References8
CVE
CVE
added 2016/07/04 10:00 p.m.76 views

CVE-2016-4431

CVE-2016-4431 affects Apache Struts 2.2.3.20–2.3.28.1, allowing remote attackers to bypass access restrictions and perform redirection via the default action method. Multiple connected advisories identify this as an in-the-wild risk in various IBM FlashSystem products and related Struts deploymen...

7.5CVSS7.8AI score0.09755EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2016/07/04 10:00 p.m.38 views

CVE-2016-4431

Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks by leveraging a default method...

8.3AI score0.09755EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2016/07/04 10:00 p.m.41 views

CVE-2016-1181

ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service unexpected memory access via a multipart request, a related issue to CVE-2015-0899...

8.3AI score0.13122EPSS
SaveExploits0References21
Cvelist
Cvelist
added 2016/07/04 10:00 p.m.41 views

CVE-2016-1182

ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site scripting XSS attacks or cause a denial of service via crafted input, a related issue to CVE-2015-0899...

7.7AI score0.25737EPSS
SaveExploits0References20
CVE
CVE
added 2016/07/04 10:00 p.m.99 views

CVE-2016-4465

CVE-2016-4465 affects Apache Struts 2, specifically the URLValidator. Versions 2.3.20–2.3.28.1 and 2.5.x before 2.5.1 are vulnerable to denial of service when a null value is submitted for a URL field, due to improper validation. The issue is caused by URLValidator handling flaws that allow an un...

5.3CVSS5.3AI score0.10365EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2016/07/04 10:00 p.m.49 views

CVE-2016-4438

The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression...

9.6AI score0.16742EPSS
SaveExploits2References6
Cvelist
Cvelist
added 2016/07/04 10:00 p.m.39 views

CVE-2016-4430

Apache Struts 2 2.3.20 through 2.3.28.1 mishandles token validation, which allows remote attackers to conduct cross-site request forgery CSRF attacks via unspecified vectors...

9AI score0.03701EPSS
SaveExploits0References8
CVE
CVE
added 2016/07/04 10:00 p.m.253 views

CVE-2016-1181

CVE-2016-1181 affects Apache Struts 1.x (1.1–1.3.10) where ActionServlet.java mishandles multithreaded access to an ActionForm, allowing a remote attacker to execute arbitrary code or cause a denial of service via a multipart request (related to CVE-2015-0899). The NVD description explicitly ties...

8.1CVSS8.4AI score0.13122EPSS
SaveExploits0References21Affected Software2
CVE
CVE
added 2016/07/04 10:00 p.m.103 views

CVE-2016-4430

CVE-2016-4430 affects Apache Struts 2.3.20–2.3.28.1, where token validation is mishandled, enabling remote CSRF attacks via unspecified vectors. Public sources in connected docs (IBM security advisories and the NVD entry) corroborate the CSRF impact and tie it to the same Struts versions. The vul...

8.8CVSS8.5AI score0.03701EPSS
SaveExploits0References8Affected Software1
CVE
CVE
added 2016/07/04 10:00 p.m.210 views

CVE-2016-4438

CVE-2016-4438 affects Apache Struts 2 REST plugin. The REST plugin in Struts 2 versions 2.3.19 through 2.3.28.1 is vulnerable to remote code execution via a crafted OGNL expression due to improper handling of OGNL expressions. The vulnerability could allow an attacker to execute arbitrary code on...

9.8CVSS9.4AI score0.16742EPSS
SaveExploits2References6Affected Software1
CVE
CVE
added 2016/07/04 10:00 p.m.184 views

CVE-2015-0899

CVE-2015-0899 affects Apache Struts 1.x (1.1–1.3.10) where the MultiPageValidator allows remote bypass of access restrictions via a modified page parameter. IBM advisories (IBM Library Support for Struts 1.3.16 remediation, and related IBM bulletins) confirm this family of vulnerabilities and lis...

7.5CVSS7.4AI score0.21261EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2016/07/04 10:00 p.m.32 views

CVE-2016-4465

The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a null value for a URL field...

5.1AI score0.10365EPSS
SaveExploits0References7
CVE
CVE
added 2016/07/04 10:00 p.m.93 views

CVE-2016-4433

CVE-2016-4433 affects Apache Struts 2.2.3.20–2.3.28.1, where a crafted request can bypass access restrictions and trigger redirection attacks. Multiple connected sources (NVD description; IBM advisories for Struts-related products) confirm the same affected range and attack pattern. The provided ...

7.5CVSS7.7AI score0.09755EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2016/07/04 10:00 p.m.31 views

CVE-2015-0899

The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter...

7.4AI score0.21261EPSS
SaveExploits0References7
CVE
CVE
added 2016/07/04 10:00 p.m.235 views

CVE-2016-1182

CVE-2016-1182 is referenced in Jira issues JSWSERVER-26635/26636 and JSDSERVER-16462/16461, tying the vulnerability to ActionServlet.java in Apache Struts 1.x (1.3.10) with improper Validator configuration. Exploitation concerns remote code execution (RCE) and DoS, with CVSS scores around 8.x (RC...

8.2CVSS7.8AI score0.25737EPSS
SaveExploits0References20Affected Software1
OpenVAS
OpenVAS
added 2016/07/02 12:00 a.m.26 views

Fedora Update for struts FEDORA-2016-21bd6a33af

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS8.4AI score0.25737EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2016/07/02 12:00 a.m.43 views

Fedora Update for struts FEDORA-2016-d717fdcf74

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS8.4AI score0.25737EPSS
SaveExploits0References2
Fedora
Fedora
added 2016/06/30 9:31 p.m.47 views

[SECURITY] Fedora 24 Update: struts-1.3.10-18.fc24

Welcome to the Struts Framework! The goal of this project is to provide an open source framework useful in building web applications with Java Servlet and JavaServer Pages JSP technology. Struts encourages application architectures based on the Model-View-Controller MVC design paradigm,...

8.2CVSS1.5AI score0.25737EPSS
SaveExploits0
Rows per page
Query Builder