Lucene search
K

4 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.20 views

Astra Linux - уязвимость в tomcat9

Path Equivalence: The use of ‘file.Name’ an internal dot notation can lead to Remote Code Execution, information disclosure, or the addition of malicious content to uploaded files via the write-enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat versions from 11.0.0-M1...

10CVSS7.7AI score0.9413EPSS
Exploits44References2
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2025-24813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via...

10CVSS8.2AI score0.9413EPSS
Exploits44References2
Amazon
Amazon
added 2025/04/01 12:0 a.m.6 views

Important: tomcat9

Issue Overview: Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from...

10CVSS8.3AI score0.9413EPSS
Exploits44
Github Security Blog
Github Security Blog
added 2025/03/10 6:31 p.m.135 views

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through...

10CVSS9.2AI score0.9413EPSS
Exploits44References15Affected Software2
Rows per page
Query Builder