Lucene search
+L

275 matches found

Nuclei
Nuclei
•added 2026/10/03 2:05 a.m.•117 views

Caucho Resin >=4.0.52 <=4.0.56 - Directory traversal

There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request. id: CVE-2021-44138 info: name: Caucho Resin =4.0.52 =4.0.56 - Directory travers...

7.5CVSS7.4AI score0.12327EPSS
SaveExploits1References2
NVD
NVD
•added 2026/09/18 8:16 p.m.•8 views

CVE-2017-20284

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS0.00958EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/18 7:00 p.m.•10 views

EUVD-2017-19014

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS6.1AI score0.00958EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/18 7:00 p.m.•12 views

CVE-2017-20284 Caucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig Servlet

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS6.1AI score0.00958EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/18 7:00 p.m.•20 views

CVE-2017-20284

Caucho Resin contains a path traversal vulnerability in the resin-doc documentation webapp, specifically through the jndi-appconfig tutorial servlet. By supplying directory traversal sequences in the inputFile request parameter, remote unauthenticated attackers can read arbitrary files outside th...

8.7CVSS6.1AI score0.00958EPSS
SaveIn wildExploits0References4
Cvelist
Cvelist
•added 2026/09/18 7:00 p.m.•41 views

CVE-2017-20284 Caucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig Servlet

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS0.00958EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•2 views

CVE-2017-20284: Improper Limitation of a Pathname to a Restricted Directory

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS6.1AI score0.00958EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2026/09/18 12:00 a.m.•14 views

VulnCheck KEV: CVE-2017-20284

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS6.1AI score0.00958EPSS
SaveIn wildExploits0References7
Malwarebytes
Malwarebytes
•added 2026/07/27 7:01 a.m.•38 views

A week in security (July 20 &#8211; July 26)

Last week on Malwarebytes Labs: Don’t get fooled by TikTok resin art scams Call of Duty Mobile scam uses fake free points to steal player accounts OpenAI’s agent escaped its sandbox during a security test Google wants to store a selfie video of your face Beyond the Play Store: How Android threats...

5.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•9 views

MiracleLinux 3 : resin-3.1.9-1AXS3 (AXSA:2009-48:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2009-48:01 advisory. Resin Open Source provides JSP, Servlet, and EJB functionality under the GPL license. Fixed bugs: CVE-2008-2462 Cross-site scripting XSS vulnerability in the...

4.3CVSS5.7AI score0.02849EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2008-2457

Malware in sbrugna...

4.3CVSS6.3AI score0.02849EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2006-2439

Malware in sbrugna...

5CVSS6.4AI score0.0243EPSS
SaveExploits1References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2004-0280

Malware in sbrugna...

5CVSS6.4AI score0.01531EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2006-1953

Malware in sbrugna...

7.8CVSS6.3AI score0.02693EPSS
SaveExploits1References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2000-1206

Malware in sbrugna...

5CVSS6.4AI score0.02865EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2014-2988

Malware in sbrugna...

5CVSS6.4AI score0.01665EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2012-2946

Malware in sbrugna...

5CVSS6.4AI score0.03488EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2002-2069

Malware in sbrugna...

5CVSS6.3AI score0.01678EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2010-2052

Malware in sbrugna...

4.3CVSS6.3AI score0.03356EPSS
SaveExploits3References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2002-1969

Malware in sbrugna...

5CVSS6.4AI score0.02154EPSS
SaveExploits0References4
Rows per page
Query Builder