PT-2023-35834 · Apache · Apache Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: A security exception crash has been reported in Apache Lucene. The crash occurs in the org.apache.lucene.util.ArrayUtil.growExact function, which is called by...

PT-2017-10812

Name of the Vulnerable Software and Affected Versions Script Security Plugin affected versions not specified Description The issue concerns the Script Security Plugin, which failed to apply sandboxing restrictions to certain invocations, including constructor invocations via positional arguments...

CVE-2016-3093

Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service block access to a web site via unspecified vectors...