Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-32771

Malicious code in bioql PyPI...

9.1CVSS6.6AI score0.00123EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-3384

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.06144EPSS
Exploits0References31
Tenable Nessus
Tenable Nessus
added 2024/05/23 12:0 a.m.48 views

Apache Tomcat 9.0.0.M1 < 9.0.0.M19 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 9.0.0.M19. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat9.0.0.m19security-9 advisory. - In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connecto...

9.8CVSS8AI score0.12669EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2018/11/05 12:0 a.m.46 views

Apache Tomcat 8.5.x < 8.5.13 Multiple Vulnerabilities

According to its self-reported version number, the Apache Tomcat service running on the remote host is 8.5.x prior to 8.5.13. It is therefore affected by multiple vulnerabilities : - A flaw exists in the handling of pipelined requests when send file processing is used that results in the pipeline...

9.8CVSS9.2AI score0.12669EPSS
Exploits0References4
NVD
NVD
added 2017/04/17 4:59 p.m.15 views

CVE-2017-5651

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in t...

9.8CVSS9.4AI score0.06144EPSS
Exploits0References15
UbuntuCve
UbuntuCve
added 2017/04/17 4:59 p.m.21 views

CVE-2017-5651

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in t...

9.8CVSS7.2AI score0.06144EPSS
Exploits0References2
CVE
CVE
added 2017/04/17 4:0 p.m.174 views

CVE-2017-5651

CVE-2017-5651 concerns Apache Tomcat 9.0.0.M1–9.0.0.M18 and 8.5.0–8.5.12, where a refactoring of HTTP connectors caused a regression in the send-file processing. If processing completes quickly, the same Processor could be added to the processor cache twice, potentially using the same Processor f...

9.8CVSS9.1AI score0.06144EPSS
In wildExploits0References15Affected Software1
Debian CVE
Debian CVE
added 2017/04/17 4:0 p.m.29 views

CVE-2017-5651

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in t...

9.8CVSS9.4AI score0.06144EPSS
Exploits0
Apache Tomcat
Apache Tomcat
added 2017/03/30 12:0 a.m.85 views

Fixed in Apache Tomcat 8.5.13

Important: Information Disclosure CVE-2017-5651 The refactoring of the HTTP connectors for 8.5.x onwards, introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could resu...

9.8CVSS8.5AI score0.12669EPSS
Exploits0Affected Software1
RedHat Linux
RedHat Linux
added 2012/05/21 4:19 p.m.3 views

tomcat: security manager restrictions bypass

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...

4.4CVSS6.1AI score0.0013EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2012/01/31 10:57 p.m.0 views

tomcat: security manager restrictions bypass

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...

4.4CVSS6.1AI score0.0013EPSS
Exploits1References4
Rows per page
Query Builder