CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

20 matches found

Kitploit•added 2026/10/24 6:01 p.m.•25 views

St2-052

S2-052 POC Testing Original title: Tomcat Deploying war Original article: http://blog.csdn.net/caiqiiqi/article/details/77861477 Download the last affected version struts-2.5.12 from the Struts2 official website: http://archive.apache.org/dist/struts/2.5.12/struts-2.5.12-apps.zip Note that you on...

6.3AI score

SaveExploits0

Kitploit•added 2026/10/24 12:27 p.m.•26 views

struts2-rce

Exploit Demo for CVE-2017-5638 Completely based on https://github.com/piesecurity/apache-struts2-CVE-2017-5638 Usage: Pre-requisites: have python, docker, maven and a jdk installed 1. clone this repo 2. run mvn clean package in project root 3. run docker build -t hack . 4. run docker run -d -p...

10CVSS8.6AI score0.99999EPSS

SaveExploits51References2

vulnersOsv•added 2026/10/05 6:36 p.m.•11 views

org.apache.struts:struts2-assembly (>=7.0.0, <=7.3.0), org.apache.struts:struts2-rest-showcase (>=7.0.0, <=7.3.0) potentially affected by CVE-2026-104713 via org.apache.struts:struts2-rest-plugin (>=7.0.0, <=7.3.0)

org.apache.struts:struts2-rest-plugin MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.3.0 Source cves: CVE-2026-104713 Source advisory: MEND:CVE-2026-104713...

6.5CVSS5.7AI score0.00689EPSS

SaveExploits0

vulnersOsv•added 2026/10/05 6:36 p.m.•9 views

com.jgeppert.struts2:struts2-aws-lambda-support-example (>=1.4.0, <=1.4.3), com.jgeppert.struts2:struts2-aws-lambda-support-plugin (>=1.4.0, <=1.4.3) +3 more potentially affected by CVE-2026-104713 via org.apache.struts:struts2-rest-plugin (>=6.0.0, <=6.11.0)

org.apache.struts:struts2-rest-plugin MAVEN version =6.0.0, =1.4.0, =1.4.0, =1.4.0, =6.0.0, =6.0.0, =6.11.0 Source cves: CVE-2026-104713 Source advisory: MEND:CVE-2026-104713...

6.5CVSS5.7AI score0.00689EPSS

SaveExploits0

vulnersOsv•added 2022/05/17 3:28 a.m.•4 views

org.apache.struts:struts2-assembly (>=2.2.1, <=2.3.15), org.apache.struts:struts2-rest-showcase (>=2.1.2, <=2.3.15.1) +5 more potentially affected by CVE-2013-4316 via org.apache.struts:struts2-rest-plugin (>=2.1.2, <=2.3.15.1)

org.apache.struts:struts2-rest-plugin MAVEN version =2.1.2, =2.2.1, =2.1.2, =2.0-rc2.3, =1.0, =1.0.1 - org.meruvian.yama:yama-struts-core 1.0.1 Source cves: CVE-2013-4316 Source advisory: OSV:GHSA-J7H6-XR7G-M2C5...

10CVSS0.08401EPSS

SaveExploits1

vulnersOsv•added 2022/05/14 12:54 a.m.•7 views

com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (2.5.0), org.apache.struts:struts2-assembly (>=2.5, <=2.5.2) +3 more potentially affected by CVE-2016-6795 via org.apache.struts:struts2-convention-plugin (>=2.5, <=2.5.2)

org.apache.struts:struts2-convention-plugin MAVEN version =2.5, =2.5, =2.5, =2.5, =2.5, =2.5.2 Source cves: CVE-2016-6795 Source advisory: GHSA-44HV-JJX7-QFJG...

9.8CVSS0.08219EPSS

SaveExploits0

vulnersOsv•added 2022/05/14 12:54 a.m.•4 views

org.apache.struts:struts2-assembly (>=2.3.20, <=2.3.28.1), org.apache.struts:struts2-rest-showcase (>=2.3.20, <=2.3.28.1) potentially affected by CVE-2016-4438 via org.apache.struts:struts2-rest-plugin (>=2.3.20, <=2.3.28.1)

org.apache.struts:struts2-rest-plugin MAVEN version =2.3.20, =2.3.20, =2.3.20, =2.3.28.1 Source cves: CVE-2016-4438 Source advisory: GHSA-4PRJ-VW9J-V6PR...

9.8CVSS0.16742EPSS

SaveExploits2

vulnersOsv•added 2022/05/14 12:54 a.m.•4 views

org.apache.struts:struts2-rest-plugin MAVEN version =2.3.20, =2.3.20, =2.3.20, =2.3.28.1 Source cves: CVE-2016-4438 Source advisory: OSV:GHSA-4PRJ-VW9J-V6PR...

9.8CVSS0.16742EPSS

SaveExploits2

vulnersOsv•added 2022/05/14 12:54 a.m.•2 views

com.github.kaitoy.sneo:giane (>=1.2.0, <=1.2.3), com.googlecode.struts2-conversation:struts2-conversation-scope-plugin (1.3.1) +13 more potentially affected by CVE-2016-6795 via org.apache.struts:struts2-convention-plugin (>=2.3.1, <=2.3.30)

org.apache.struts:struts2-convention-plugin MAVEN version =2.3.1, =1.2.0, =1.1.0, =3.3.0, =3.3.0, =2.3.1, =2.3.1, =2.3.1, =2.3.1, =2.2.1, =2.2, =3.2.0, =1.0, =1.2.2, =1.3.5 Source cves: CVE-2016-6795 Source advisory: GHSA-44HV-JJX7-QFJG...

9.8CVSS0.08219EPSS

SaveExploits0

vulnersOsv•added 2018/10/16 7:37 p.m.•5 views

com.moomanow.web:moomanowwebapp (>=0.0.1, <=0.0.10), com.moomanow:moomanow-struts2-core (>=0.0.4, <=0.1.0) +2 more potentially affected by CVE-2017-9805 via org.apache.struts:struts2-rest-plugin (>=2.5, <=2.5.12)

org.apache.struts:struts2-rest-plugin MAVEN version =2.5, =0.0.1, =0.0.4, =2.5, =2.5, =2.5.12 Source cves: CVE-2017-9805 Source advisory: OSV:GHSA-GG9M-FJ3V-R58C...

8.1CVSS0.99396EPSS

SaveExploits24

vulnersOsv•added 2018/10/16 7:37 p.m.•3 views

com.moomanow.web:moomanowwebapp (>=0.0.1, <=0.0.10), com.moomanow:moomanow-struts2-core (>=0.0.4, <=0.1.0) +2 more potentially affected by CVE-2017-9793 via org.apache.struts:struts2-rest-plugin (>=2.5, <=2.5.12)

org.apache.struts:struts2-rest-plugin MAVEN version =2.5, =0.0.1, =0.0.4, =2.5, =2.5, =2.5.12 Source cves: CVE-2017-9793 Source advisory: OSV:GHSA-VWXJ-6M5M-RRVH...

7.5CVSS0.08787EPSS

SaveExploits0

vulnersOsv•added 2018/10/16 7:35 p.m.•3 views

com.moomanow.web:moomanowwebapp (>=0.0.1, <=0.0.10), com.moomanow:moomanow-struts2-core (>=0.0.4, <=0.1.0) +2 more potentially affected by CVE-2017-15707 via org.apache.struts:struts2-rest-plugin (>=2.5, <=2.5.14)

org.apache.struts:struts2-rest-plugin MAVEN version =2.5, =0.0.1, =0.0.4, =2.5, =2.5, =2.5.14 Source cves: CVE-2017-15707 Source advisory: GHSA-XCRM-QPP8-HCW4...

6.2CVSS0.04889EPSS

SaveExploits2

vulnersOsv•added 2018/10/16 7:35 p.m.•3 views

org.apache.struts:struts2-rest-plugin MAVEN version =2.5, =0.0.1, =0.0.4, =2.5, =2.5, =2.5.14.1 Source cves: CVE-2017-15707 Source advisory: OSV:GHSA-XCRM-QPP8-HCW4...

6.2CVSS0.04889EPSS

SaveExploits2

vulnersOsv•added 2017/09/20 5:00 p.m.•6 views

org.apache.struts:struts2-rest-plugin MAVEN version =2.5, =0.0.1, =0.0.4, =2.5, =2.5, =2.5.12 Source cves: CVE-2017-9793 Source advisory: MEND:CVE-2017-9793...

7.5CVSS0.08787EPSS

SaveExploits0

vulnersOsv•added 2017/09/20 5:00 p.m.•4 views

org.apache.struts:struts2-convention-plugin MAVEN version =2.5, =2.5, =2.5, =2.5, =2.5, =2.5.2 Source cves: CVE-2016-6795 Source advisory: MEND:CVE-2016-6795...

9.8CVSS0.08219EPSS

SaveExploits0

vulnersOsv•added 2016/07/04 10:00 p.m.•5 views

org.apache.struts:struts2-rest-plugin MAVEN version =2.3.20, =2.3.20, =2.3.20, =2.3.28.1 Source cves: CVE-2016-4438 Source advisory: MEND:CVE-2016-4438...

9.8CVSS0.16742EPSS

SaveExploits2

vulnersOsv•added 2013/09/30 9:00 p.m.•5 views

10CVSS0.08401EPSS

SaveExploits1

NVD•added 2012/02/07 4:09 a.m.•37 views

CVE-2012-1006

Multiple cross-site scripting XSS vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 lastName parameter to struts2-showcase/person/editPerson.action, or the 3 clientName parameter to struts2-rest-showcase/orders...

4.3CVSS8.3AI score0.56607EPSS

SaveExploits2References4

Rapid7 Vulnerability Database (full)•added 2012/02/07 12:00 a.m.•8 views

CVE-2012-1006: Improper Neutralization of Input During Web Page Generation

4.3CVSS5.9AI score0.56607EPSS

SaveExploits2References2

Positive Technologies•added 2012/02/01 12:00 a.m.•7 views

PT-2012-1242

Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.0.14 through 2.2.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the name or lastName parameter to "struts2-showcase/person/editPerson.action", or the clientName parameter to...

4.3CVSS0.56607EPSS

SaveExploits2References14

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by