Lucene search
+L

7546 matches found

seebug.org
seebug.org
added 2016/11/25 12:00 a.m.3941 views

Apache Tomcat Remote Code Execution(CVE-2016-8735)

Update 12/04 : the need to note that in conf/server,xml to increase the configuration, you need the catalina-jmx-remote. the jar and the groovy-2.3.9. jar package into lib directory And modify the CATALINAOPTS"-Dcom. sun. management. jmxremote. ssl=false-Dcom. sun. management. jmxremote...

10CVSS9.7AI score0.92334EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2016/11/24 12:00 a.m.64 views

CVE-2016-8735

Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency...

9.8CVSS7.5AI score0.90338EPSS
SaveExploits1References6
CNVD
CNVD
added 2016/11/23 12:00 a.m.7 views

Apache Tomcat Denial of Service Vulnerability (CNVD-2016-11592)

Apache Tomcat is a popular open source JSP application server program. A denial of service vulnerability exists in Apache Tomcat, which can be exploited by an attacker to cause the HTTP/2 header parser to enter an infinite loop, resulting in a denial of service...

7.5CVSS7.5AI score0.0719EPSS
SaveExploits1References1
CNVD
CNVD
added 2016/11/23 12:00 a.m.10 views

Apache Tomcat Security Restriction Bypass Vulnerability (CNVD-2016-11591)

Apache Tomcat is a popular open source JSP application server program. A security restriction bypass vulnerability exists in Apache Tomcat. An attacker can exploit this vulnerability to bypass certain security restrictions and perform unauthorized operations...

7.1CVSS9.4AI score0.39633EPSS
SaveExploits6References1
CNVD
CNVD
added 2016/11/23 12:00 a.m.6 views

Apache Tomcat Remote Code Execution Vulnerability

Apache Tomcat is a popular open source JSP application server program. Some versions of Apache Tomcat have a remote code execution vulnerability in the implementation of JmxRemoteLifecycleListener, which can be exploited by an attacker to cause remote code execution...

9.8CVSS9.8AI score0.90338EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2016/11/23 12:00 a.m.61 views

CVE-2016-6816

The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a...

7.1CVSS7.1AI score0.39633EPSS
SaveExploits6References4
RedhatCVE
RedhatCVE
added 2016/11/22 3:47 p.m.34 views

CVE-2016-6817

The HTTP/2 header parser in Apache Tomcat 9.0.0.M1 to 9.0.0.M11 and 8.5.0 to 8.5.6 entered an infinite loop if a header was received that was larger than the available buffer. This made a denial of service attack possible...

7.5CVSS3.6AI score0.0719EPSS
SaveExploits1References1
Apache Tomcat
Apache Tomcat
added 2016/11/15 12:00 a.m.124 views

Fixed in Apache Tomcat 6.0.48

Important: Remote Code Execution CVE-2016-8735 The JmxRemoteLifecycleListener was not updated to take account of Oracle's fix for CVE-2016-3427. Therefore, Tomcat installations using this listener remained vulnerable to a similar remote code execution vulnerability. This issue has been rated as...

9.8CVSS9.1AI score0.90338EPSS
SaveExploits7Affected Software1
F5 Networks
F5 Networks
added 2016/11/14 12:00 a.m.232 views

SOL65230547 - Apache Tomcat vulnerabilities CVE-2016-5018, CVE-2016-6794, and CVE-2016-6796

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

9.1CVSS0.7AI score0.10303EPSS
SaveExploits5References4
F5 Networks
F5 Networks
added 2016/11/14 12:00 a.m.45 views

SOL36784855 - Apache Tomcat vulnerability CVE-2016-0762

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

5.9CVSS0.7AI score0.07991EPSS
SaveExploits0References4
Apache Tomcat
Apache Tomcat
added 2016/11/14 12:00 a.m.129 views

Fixed in Apache Tomcat 8.0.39

Important: Remote Code Execution CVE-2016-8735 The JmxRemoteLifecycleListener was not updated to take account of Oracle's fix for CVE-2016-3427. Therefore, Tomcat installations using this listener remained vulnerable to a similar remote code execution vulnerability. This issue has been rated as...

9.8CVSS9.1AI score0.90338EPSS
SaveExploits7Affected Software1
F5 Networks
F5 Networks
added 2016/11/14 12:00 a.m.92 views

SOL36302720 - Apache Tomcat vulnerability CVE-2016-6797

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

7.5CVSS0.7AI score0.0807EPSS
SaveExploits0References4
Apache Tomcat
Apache Tomcat
added 2016/11/14 12:00 a.m.108 views

Fixed in Apache Tomcat 7.0.73

Important: Remote Code Execution CVE-2016-8735 The JmxRemoteLifecycleListener was not updated to take account of Oracle's fix for CVE-2016-3427. Therefore, Tomcat installations using this listener remained vulnerable to a similar remote code execution vulnerability. This issue has been rated as...

9.8CVSS9.1AI score0.90338EPSS
SaveExploits7Affected Software1
Positive Technologies
Positive Technologies
added 2016/11/08 12:00 a.m.12 views

PT-2016-7120 · Apache · Apache Tomcat

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 8.5.0 through 8.5.6 Apache Tomcat versions 9.0.0.M1 through 9.0.0.M11 Description: The HTTP/2 header parser in Apache Tomcat entered an infinite loop if a header was received that was larger than the available buffer...

7.5CVSS7.5AI score0.0719EPSS
SaveExploits1References26
Positive Technologies
Positive Technologies
added 2016/11/08 12:00 a.m.8 views

PT-2016-3139 · Apache +3 · Apache Tomcat +3

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 6.0.0 through 6.0.47 Apache Tomcat versions 7.0.0 through 7.0.72 Apache Tomcat versions 8.0.0 through 8.0.38 Apache Tomcat versions 8.5.0 through 8.5.6 Apache Tomcat versions 9.0.0.M1 through 9.0.0.M11 Description: The...

9.8CVSS9.8AI score0.90338EPSS
SaveExploits12References180
Apache Tomcat
Apache Tomcat
added 2016/11/08 12:00 a.m.873 views

Fixed in Apache Tomcat 8.5.8

Note: The issues below were fixed in Apache Tomcat 8.5.7 but the release vote for the 8.5.7 release candidate did not pass. Therefore, although users must download 8.5.8 to obtain a version that includes fixes for these issues, version 8.5.7 is not included in the list of affected versions...

9.8CVSS9.6AI score0.90338EPSS
SaveExploits8Affected Software1
Positive Technologies
Positive Technologies
added 2016/11/08 12:00 a.m.21 views

PT-2016-7119 · Apache +5 · Apache Tomcat +5

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 9.0.0.M1 through 9.0.0.M11 Apache Tomcat versions 8.5.0 through 8.5.6 Apache Tomcat versions 8.0.0.RC1 through 8.0.38 Apache Tomcat versions 7.0.0 through 7.0.72 Apache Tomcat versions 6.0.0 through 6.0.47 Description:...

9.8CVSS6.5AI score0.90338EPSS
SaveExploits12References189
Tenable Nessus
Tenable Nessus
added 2016/11/04 12:00 a.m.46 views

Apache Tomcat 8.5.x < 8.5.5 / 9.0.0.x < 9.0.0.M10 Multiple Vulnerabilities

Binary data 9721.pasl...

5.9CVSS7.8AI score0.07991EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2016/11/04 12:00 a.m.80 views

Apache Tomcat 8.5.0 < 8.5.5 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 8.5.5. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat8.5.5and8.0.37security-8 advisory. - The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4,...

9.1CVSS6.4AI score0.10303EPSS
SaveExploits5References20
Tenable Nessus
Tenable Nessus
added 2016/11/04 12:00 a.m.12 views

Apache Tomcat Version 9.x Detection

Binary data 9715.prm...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder