3672 matches found
mod_jk: information Disclosure / DoS
An Incorrect Default Permissions vulnerability was found in Apache Tomcat Connectors that allows local users to view and modify shared memory containing modjk configuration, which may lead to information disclosure and denial of service...
VulnCheck KEV: CVE-2021-41285
Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vulnerability is triggered by sending a specific IOCTL request that allows low-privileged users to directly interact with physical memory via the MmMapIoSpace function call mapping...
CVE-2024-51240
An issue in the luci-mod-rpc package in OpenWRT Luci LTS allows for privilege escalation from an admin account to root via the JSON-RPC-API, which is exposed by the luci-mod-rpc package...
PT-2024-7903
Name of the Vulnerable Software and Affected Versions: OpenWRT Luci LTS affected versions not specified Description: An issue in the luci-mod-rpc package allows for privilege escalation from an admin account to root via the JSON-RPC-API, which is exposed by the luci-mod-rpc package. The...
CVE-2024-51240
An issue in the luci-mod-rpc package in OpenWRT Luci LTS allows for privilege escalation from an admin account to root via the JSON-RPC-API, which is exposed by the luci-mod-rpc package...
CVE-2024-51240
An issue in the luci-mod-rpc package in OpenWRT Luci LTS allows for privilege escalation from an admin account to root via the JSON-RPC-API, which is exposed by the luci-mod-rpc package...
CVE-2024-51240
An issue in the luci-mod-rpc package in OpenWRT Luci LTS allows for privilege escalation from an admin account to root via the JSON-RPC-API, which is exposed by the luci-mod-rpc package...
CVE-2024-51240: Insufficiently Protected Credentials
An issue in the luci-mod-rpc package in OpenWRT Luci LTS allows for privilege escalation from an admin account to root via the JSON-RPC-API, which is exposed by the luci-mod-rpc package...
CVE-2024-51240
The luci-mod-rpc package in OpenWRT Luci LTS is vulnerable to a privilege escalation flaw. An attacker can elevate privileges from an admin account to root by exploiting the JSON-RPC-API , which is exposed by the package. The root cause is linked to insufficient protection of registration data wi...
SourceCodester Online Hotel Reservation System 代码问题漏洞
SourceCodester Online Hotel Reservation System is a SourceCodester open source online hotel system. A code issue vulnerability exists in SourceCodester Online Hotel Reservation System version 1.0, which stems from an unrestricted file double-penetration vulnerability in the image parameter of the...
SourceCodester Online Hotel Reservation System SQL注入漏洞
SourceCodester Online Hotel Reservation System is a SourceCodester open source online hotel system. SourceCodester Online Hotel Reservation System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the id parameter in the /marimar/admin/modroom/controller.php page contain...
PT-2024-9929
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data race issue has been identified in the Linux kernel, specifically in the mod timer and kvfree call rcu functions. This issue can lead to a denial of service. The problem occurs...
CVE-2024-48645
In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization CWE-862 allows any user to modify "function" files used by the game when installed on a dedicated server...
CVE-2024-48645
In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization CWE-862 allows any user to modify "function" files used by the game when installed on a dedicated server...
Debian: Security Advisory (DLA-3919-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3919-1] libapache-mod-jk security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3919-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 14, 2024 https://wiki.debian.org/LTS -...
DLA-3919-1 libapache-mod-jk - security update
Bulletin has no description...
Debian dla-3919 : libapache-mod-jk-doc - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3919 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3919-1 [email protected] https://www.debian.org/lts/security/...
The vulnerability of the mod_jk module of the Apache Tomcat JK Connector allows attackers to disclose sensitive information or cause service failures.
The vulnerability of the JkShmFile directive in the modjk module of the Apache Tomcat JK Connector is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow an attacker to disclose information about the modjk module or cause service failures...