CVE-2022-42899

CVE-2022-42899 Apache Common Text starting from version 1.5 to 1.9 has Remote code execution vulnerability CVE-2022-42899. final StringSubstitutor interpolator = StringSubstitutor.createInterpolator; interpolator.replace"$script:javascript:java.lang.Runtime.getRuntime.exec'"; // Here you will pas...

ROS-20260224-73-0009

A vulnerability in the Apache Common Text library of FileMaker Server is related to improper control of code generation when using interpolation functions. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

The vulnerability of the Apache Common Text library on FileMaker Server, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Apache Common Text library in FileMaker Server is related to improper code generation when using interpolation functions. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2024-25710

A loop with an unreachable exit condition Infinite Loop vulnerability was found in Apache Common Compress. This issue can lead to a denial of service. Mitigation No mitigation is currently available for this vulnerability...

ROS-20230922-01

Vulnerability in the StringSubstitutor component of the Apache Common Text library is related to mismanagement of code generation. code generation. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

Exploit for Out-of-bounds Read in Bentley Microstation

CVE-2022-42899 Apache Common Text starting from version 1.5 to...

Exploit for Code Injection in Apache Commons_Text

cve-2022-42889 cve-2022-42889 Text4Shell affects Apache C...

New text2shell RCE vulnerability in Apache Common Texts CVE-2022-42889

Yet another RCE with a CVSS score of 9.8 out of 10 was disclosed a few hours ago. This issue looks like the same Log4shell and it seems even more dangerous since Common Texts are used more broadly. The Apache Foundation published a vulnerability in the Apache Commons Text project code and publish...

Oracle WebCenter Sites Multiple Vulnerabilities (April 2017 CPU)

Oracle WebCenter Sites component of Oracle Fusion Middleware is vulnerable to multiple vulnerabilities. - A remote code execution in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Install Apache Common Collections. An unauthenticated, remote attacker can exploit...

USN-1298-1: Apache Commons Daemon vulnerability

Wilfried Weissmann discovered that Apache Commons Daemon incorrectly dropped capabilities after starting. A remote attacker could possibly use this flaw to read certain files, bypassing the intended permissions...

DSA-803-1 apache - programming error

Bulletin has no description...

Debian DSA-525-1 : apache - buffer overflow

Georgi Guninski discovered a buffer overflow bug in Apache's modproxy module, whereby a remote user could potentially cause arbitrary code to be executed with the privileges of an Apache httpd child process by default, user www-data. Note that this bug is only exploitable if the modproxy module i...