2430 matches found
Apache Struts 2.3.1 < 2.3.31 / 2.5.x < 2.5.5 Convention Plugin Path Traversal RCE (S2-042)
The version of Apache Struts running on the remote host is 2.3.1 prior to 2.3.31 or 2.5.x prior to 2.5.5. It is, therefore, affected by a remote code execution vulnerability in the Convention plugin due to a flaw that allows traversing outside of a restricted path. An unauthenticated, remote...
IBM WebSphere Application Server 7.0 < 7.0.0.33 Multiple Vulnerabilities
Binary data 9699.prm...
Novell NetIQ Sentinel CVE-2016-1000031 Remote Code Execution Vulnerability
Description Novell NetIQ Sentinel is prone to a security vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Novell NetIQ Sentinel version 7.4x are vulnerable. Technologies Affected Apache Commons FileUpload 1.0...
PT-2016-7114
Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.3.x through 2.3.30 Apache Struts versions 2.5.x through 2.5.4 Description A path traversal issue in Apache Struts allows attackers to execute arbitrary code on the server side using a specially crafted URL. This issue ...
CVE-2016-4436
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...
CVE-2016-4436
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...
Input validation
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...
CVE-2016-4436
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...
CVE-2016-4436: Undefined Security Weakness
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...
The vulnerability of the Apache Struts software platform, which allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the Apache Struts software platform is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a denial-of-service attack through a combined request...
The vulnerability of the Apache Struts software platform, which allows a hacker to execute arbitrary code
The vulnerability of the REST plugin for the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created expression...
The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions
The vulnerability of the MultiPageValidator implementation in the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing access restrictions by modifying page parameters remotely...
The vulnerability of the Apache Struts software platform, which allows a hacker to trigger a service failure
The vulnerability of the URLValidator class in the Apache Struts software framework exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure by using a null value in the URL field...
The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions
The vulnerability of the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions by using a specially created request...
The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions
The vulnerability of the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions by using the default method...
The vulnerability of the Apache Struts software platform, which allows attackers to trigger service failures or perform XSS attacks.
The vulnerability of the ActionServlet.java file on the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform XSS attacks or cause service failures by using specially crafted input data...
Apache Struts URLValidator Denial of Service (CVE-2016-4465)
A denial of service vulnerability exists in Apache Struts URLValidator. The vulnerability is due to insufficient validation of crafted URLs by the URLValidator. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted HTTP request to a Struts 2 application...
MGASA-2016-0244 Updated struts packages fix security vulnerabilities
Updated struts packages fix security vulnerabilities: A vulnerability in Apache Struts 1 ActionForm allowing unintended remote operations against components on server memory, such as Servlets and ClassLoader, was found CVE-2016-1181. It was reported that The Apache Struts 1 Validator contains a...
Updated struts packages fix security vulnerabilities
Updated struts packages fix security vulnerabilities: A vulnerability in Apache Struts 1 ActionForm allowing unintended remote operations against components on server memory, such as Servlets and ClassLoader, was found CVE-2016-1181. It was reported that The Apache Struts 1 Validator contains a...
