1568 matches found
Apache Tomcat 9.0.0.M1 < 9.0.8
The version of Tomcat installed on the remote host is prior to 9.0.8. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.8security-9 advisory. - An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop i...
Security update for java-11-openjdk (important)
openSUSE Security Update: Security update for java-11-openjdk Announcement ID: openSUSE-SU-2019:0161-1 Rating: important References: 1120431 1122293 1122299 Cross-References: CVE-2018-11212 CVE-2019-2422 CVE-2019-2426 Affected Products: openSUSE Leap 15.0 An update that fixes three vulnerabilitie...
Denial Of Service (DoS)
tomcat-util is vulnerable to denial of service DoS attacks. The attack exists due to not proper handling of overflow in the decodeHasArray function in UTF-8 decoder...
Denial Of Service (DoS)
pidgin is vulnerable to denial of service DoS attacks. The vulnerability exists as the msnoimreporttouser function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service application crash via an OIM message that lacks UTF-8...
Apache Tomcat 7.0.28 < 7.0.88
The version of Tomcat installed on the remote host is prior to 7.0.88. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat7.0.88security-7 advisory. - An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop...
Updated tomcat packages fix security vulnerabilities
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service CVE-2018-1336. The defaults settings for the CORS filter are insecure and enable supportsCredentials for all origins. It is expected that user...
SUSE SLES11 Security Update : glib2 (SUSE-SU-2018:3966-1)
This update for glib2 fixes the following issues : Security issues fixed : CVE-2018-16429: Fixed out-of-bounds read vulnerability ingmarkupparsecontextparse bsc1107116. Fixing potentially exploitable bugs in UTF-8 validation in Variant and DBUS message parsing bsc1111499. Note that Tenable Networ...
SUSE-SU-2018:3966-1 Security update for glib2
This update for glib2 fixes the following issues: Security issues fixed: - CVE-2018-16429: Fixed out-of-bounds read vulnerability ingmarkupparsecontextparse bsc1107116. - Fixing potentially exploitable bugs in UTF-8 validation in Variant and DBUS message parsing bsc1111499...
[SECURITY] Fedora 28 Update: links-2.17-1.fc28
Links is a web browser capable of running in either graphics or text mode. It provides a pull-down menu system, renders complex pages, has partial HTML 4.0 support including tables, frames and support for multiple character se ts and UTF-8, supports color and monochrome terminals and allows...
[SECURITY] Fedora 28 Update: php-phpmailer6-6.0.6-1.fc28
PHPMailer - A full-featured email creation and transfer class for PHP Class Features Probably the world's most popular code for sending email from PHP! Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more Integrated SMTP support - send without a local...
[SECURITY] Fedora 29 Update: links-2.17-1.fc29
Links is a web browser capable of running in either graphics or text mode. It provides a pull-down menu system, renders complex pages, has partial HTML 4.0 support including tables, frames and support for multiple character se ts and UTF-8, supports color and monochrome terminals and allows...
Directory Traversal
tomcat-coyote is vulnerable to directory traversal attacks. The vulnerability exists as the JVM does not correctly decode UTF-8 encoded URLs, and when a context is configured with allowLinking="true", allowing directory traversal attacks...
Amazon Linux 2 : tomcat (ALAS-2018-1105)
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service.CVE-2018-1336 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux 2...
Important: tomcat
Issue Overview: An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service.CVE-2018-1336 Affected Packages: tomcat Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FA...
Apache Tomcat 'UTF-8' Directory Traversal Vulnerability - Active Check
Apache Tomcat is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86...
Scientific Linux Security Update : tomcat on SL7.x (noarch) (20181016)
Security Fixes : - tomcat: A bug in the UTF-8 decoder can lead to DoS CVE-2018-1336 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid118167; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...
tomcat security update
CentOS Errata and Security Advisory CESA-2018:2921 An update for tomcat is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Important: Red Hat Security Advisory: tomcat security update
An update for tomcat is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
