EUVD-2023-54607

Malicious code in bioql PyPI...

Eclipse RAP Path Traversal Vulnerability

Eclipse RAP is an open source software project of the Eclipse Foundation designed to enable software developers to build Ajax-enabled Rich Internet Applications using the Eclipse development model, plug-ins, and Java-only Application Programming Interface. A security vulnerability exists in Eclip...

CVE-2023-4760: Improper Limitation of a Pathname to a Restricted Directory

In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using the FileUpload component. The reason for this is a not completely secure extraction of the file name in the FileUploadProcessor.stripFileNameString name method. As soon as this...

Apache Tomcat Denial of Service Vulnerability (CNVD-2016-04312)

Apache Tomcat is a popular open source JSP application server program. A denial of service vulnerability exists in the Apache Commons FileUpload component of Apache Tomcat used for file uploads, which can be exploited by a remote attacker to cause a crash of the affected application, resulting in...