2353 matches found
CVE-2025-55754
CVE-2025-55754 affects Apache Tomcat: improper neutralization of ANSI escape sequences in log messages could enable console/clipboard manipulation via crafted URLs. Affected: Tomcat 11.x (11.0.0-M1 to 11.0.10), 10.x (10.1.0-M1 to 10.1.44), 9.x (9.0.40 to 9.0.108), plus some EOL versions. Remediat...
EUVD-2025-36225
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an...
Improper Output Neutralization for Logs
Overview Affected versions of this package are vulnerable to Improper Output Neutralization for Logs of ANSI escape sequences. When running in a console supporting ANSI escape sequences, an attacker can send specially crafted requests to manipulate the console and the clipboard, potentially...
Apache Tomcat 安全漏洞
Apache Tomcat is a lightweight Web application server from the American Apache Apache Foundation. It is used to implement support for Servlets and JavaServer Page JSP. A security vulnerability exists in Apache Tomcat that stems from not properly escaping ANSI escape sequences, which could lead to...
Apache Tomcat 10.1.0.M1 < 10.1.45 multiple vulnerabilities
The version of Tomcat installed on the remote host is prior to 10.1.45. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.45security-10 advisory. - Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regressi...
Apache Tomcat 11.0.0.M1 < 11.0.11 multiple vulnerabilities
The version of Tomcat installed on the remote host is prior to 11.0.11. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat11.0.11security-11 advisory. - Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regressi...
Apache Tomcat 9.0.0.M11 < 9.0.109 multiple vulnerabilities
The version of Tomcat installed on the remote host is prior to 9.0.109. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat9.0.109security-9 advisory. - Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regressio...
curl: SMTP Command Injection Vulnerability in libcurl 8.16.0 via RFC 3461 Suffix
Executive Summary libcurl version 8.16.0 contains a critical SMTP command injection vulnerability CVE-quality in the implementation of RFC 3461 Delivery Status Notification DSN parameter support. The vulnerability allows an attacker to inject arbitrary SMTP commands by including CRLF \r\n...
EUVD-2018-7002
Malware in sbrugna...
EUVD-2019-0769
Malware in sbrugna...
EUVD-2007-2227
Malware in sbrugna...
EUVD-2006-3323
Malware in sbrugna...
EUVD-2014-7098
Malware in sbrugna...
EUVD-2010-3246
Malware in sbrugna...
EUVD-2020-0233
Malware in sbrugna...
EUVD-2005-4137
Malware in sbrugna...
EUVD-2018-19542
Malware in sbrugna...
EUVD-2009-1818
Malware in sbrugna...