Lucene search
K

1986 matches found

OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.29 views

Apache Struts Unspecified Vulnerability (S2-035) - Linux

Apache Struts is prone to an unspecified vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.8CVSS8.9AI score0.06779EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.46 views

Apache Struts Multiple Vulnerabilities (S2-037, S2-038, S2-039, S2-040) - Linux

Apache Struts is prone to multiple vulnerabilities. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.8CVSS8.4AI score0.17171EPSS
Exploits2References8
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.26 views

Apache Struts DoS Vulnerability (S2-041) - Linux

Apache Struts is prone to a Denial of Service DoS vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

5.3CVSS5.6AI score0.10638EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.27 views

Apache Struts 1.x - 1.3.10 Multiple Vulnerabilities - Windows

Apache Struts is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.2CVSS8.3AI score0.2593EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.44 views

Apache Struts Security Update (S2-037, S2-038, S2-039, S2-040)

Apache Struts is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.2AI score0.17171EPSS
Exploits2References12
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.33 views

Apache Struts Security Update (S2-035)

Apache Struts is prone to an unspecified vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

9.8CVSS9.5AI score0.06779EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.18 views

Apache Struts Security Update (S2-041)

Apache Struts is prone to a Denial of Service DoS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

5.3CVSS5.5AI score0.10638EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2016/10/27 12:0 a.m.64 views

Apache Struts 2.3.1 < 2.3.31 / 2.5.x < 2.5.5 Convention Plugin Path Traversal RCE (S2-042)

The version of Apache Struts running on the remote host is 2.3.1 prior to 2.3.31 or 2.5.x prior to 2.5.5. It is, therefore, affected by a remote code execution vulnerability in the Convention plugin due to a flaw that allows traversing outside of a restricted path. An unauthenticated, remote...

9.8CVSS9.4AI score0.08438EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2016/10/26 12:0 a.m.61 views

IBM WebSphere Application Server 7.0 < 7.0.0.33 Multiple Vulnerabilities

Binary data 9699.prm...

7.8CVSS7.2AI score0.95821EPSS
Exploits16References17
Symantec
Symantec
added 2016/10/17 12:0 a.m.44 views

Novell NetIQ Sentinel CVE-2016-1000031 Remote Code Execution Vulnerability

Description Novell NetIQ Sentinel is prone to a security vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Novell NetIQ Sentinel version 7.4x are vulnerable. Technologies Affected Apache Commons FileUpload 1.0...

7.5CVSS0.8AI score0.34731EPSS
Exploits0References2Affected Software50
OSV
OSV
added 2016/10/03 3:59 p.m.5 views

CVE-2016-4436

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

9.8CVSS9.6AI score
Exploits0References5
Prion
Prion
added 2016/10/03 3:59 p.m.24 views

Input validation

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

7.5CVSS7.3AI score0.06779EPSS
Exploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2016/10/03 3:59 p.m.31 views

CVE-2016-4436

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

9.8CVSS7.2AI score0.06779EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2016/07/19 12:0 a.m.3 views

The vulnerability of the Apache Struts software platform, which allows a hacker to execute arbitrary code

The vulnerability of the REST plugin for the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created expression...

7.5CVSS8.2AI score0.17171EPSS
Exploits2References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/19 12:0 a.m.2 views

The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions

The vulnerability of the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions by using the default method...

5CVSS7.2AI score0.10013EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/19 12:0 a.m.4 views

The vulnerability of the Apache Struts software platform, which allows attackers to trigger service failures or perform XSS attacks.

The vulnerability of the ActionServlet.java file on the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform XSS attacks or cause service failures by using specially crafted input data...

6.4CVSS7.4AI score0.2593EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/19 12:0 a.m.1 views

The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions

The vulnerability of the MultiPageValidator implementation in the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing access restrictions by modifying page parameters remotely...

5CVSS7.1AI score0.21425EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/19 12:0 a.m.4 views

The vulnerability of the Apache Struts software platform, which allows a hacker to trigger a service failure

The vulnerability of the URLValidator class in the Apache Struts software framework exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure by using a null value in the URL field...

5CVSS6.2AI score0.10638EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/19 12:0 a.m.3 views

The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions

The vulnerability of the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions by using a specially created request...

5CVSS7.2AI score0.10013EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/19 12:0 a.m.3 views

The vulnerability of the Apache Struts software platform, which allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the Apache Struts software platform is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a denial-of-service attack through a combined request...

6.8CVSS7.9AI score0.13227EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder