Lucene search
+L

11731 matches found

Github Security Blog
Github Security Blog
•added 2023/10/10 6:31 p.m.•64 views

Apache Tomcat Incomplete Cleanup vulnerability

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened ...

5.9CVSS6.8AI score0.02304EPSS
SaveExploits0References4Affected Software1
osv_debian
osv_debian
•added 2023/10/10 6:15 p.m.•19 views

DEBIAN-CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

5.3CVSS6.5AI score0.02515EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/10 6:15 p.m.•26 views

CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened ...

5.9CVSS6.4AI score0.02304EPSS
SaveExploits0References2
NVD
NVD
•added 2023/10/10 6:15 p.m.•41 views

CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

5.3CVSS6.4AI score0.02515EPSS
SaveExploits1References6
NVD
NVD
•added 2023/10/10 6:15 p.m.•40 views

CVE-2023-36704

Windows Setup Files Cleanup Remote Code Execution Vulnerability...

7.8CVSS8.4AI score0.00814EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/10/10 6:15 p.m.•19 views

CVE-2023-36704

Windows Setup Files Cleanup Remote Code Execution Vulnerability...

7.8CVSS7.5AI score0.00814EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2023/10/10 6:15 p.m.•22 views

UBUNTU-CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened ...

5.9CVSS6.8AI score0.02304EPSS
SaveExploits0References5
Prion
Prion
•added 2023/10/10 6:15 p.m.•53 views

Input validation

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened ...

2.6CVSS7.3AI score0.02304EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/10/10 6:15 p.m.•50 views

Input validation

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

5CVSS6.1AI score0.02515EPSS
SaveExploits1References6Affected Software2
Prion
Prion
•added 2023/10/10 6:15 p.m.•34 views

Remote code execution

Windows Setup Files Cleanup Remote Code Execution Vulnerability...

4.4CVSS8.4AI score0.00814EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
•added 2023/10/10 6:15 p.m.•115 views

CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

5.3CVSS6.6AI score0.02515EPSS
SaveExploits1References6
osv_ubuntu
osv_ubuntu
•added 2023/10/10 6:15 p.m.•13 views

UBUNTU-CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

5.3CVSS6.5AI score0.02515EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2023/10/10 5:42 p.m.•39 views

CVE-2023-42795 Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

6.6AI score0.02515EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2023/10/10 5:42 p.m.•65 views

CVE-2023-42795 Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

5.3CVSS6.6AI score0.02515EPSS
SaveExploits1References8
CVE
CVE
•added 2023/10/10 5:17 p.m.•411 views

CVE-2023-42794

CVE-2023-42794 is an Incomplete Cleanup vulnerability in Apache Tomcat’s internal Commons FileUpload fork. It affects Tomcat 9.0.70–9.0.80 and 8.5.85–8.5.93; a partially refactored, unreleased code path could leave an uploaded file stream open if not closed, causing the file to remain on disk and...

5.9CVSS6.7AI score0.02304EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2023/10/10 5:17 p.m.•28 views

CVE-2023-42794 Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened ...

6.7AI score0.02304EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2023/10/10 5:17 p.m.•56 views

CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened ...

5.9CVSS6.7AI score0.02304EPSS
SaveExploits0
Cvelist
Cvelist
•added 2023/10/10 5:17 p.m.•66 views

CVE-2023-42794 Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened ...

6.4AI score0.02304EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/10 5:07 p.m.•172 views

CVE-2023-36704

Converging details from connected documents indicate CVE-2023-36704, named Windows Setup Files Cleanup, is a remote code execution vulnerability in the Windows Setup Files Cleanup component. The KLA61358 entry explicitly notes a remote code execution vulnerability for Windows Setup Files Cleanup ...

7.8CVSS7.5AI score0.00814EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2023/10/10 5:07 p.m.•38 views

CVE-2023-36704 Windows Setup Files Cleanup Remote Code Execution Vulnerability

...

7.8CVSS7.4AI score0.00814EPSS
SaveExploits0References1
Rows per page
Query Builder