114 matches found
jetty_9.4.31_CVE-2021-34428
Eclipse Jetty 정식 저장소 ================================== 이것은 Jetty 프로젝트의 정식 저장소입니다. 자유롭게 포크하고 기여하세요! 패치 또는 풀 리퀘스트를 제출하시겠습니까? Eclipse Contributor Agreement ECA가 파일에 등록되어 있는지 확인하십시오. eclipse.org/legal/ecafaq 프로젝트 설명 Jetty는 가볍고 확장성이 뛰어난 Java 기반의 웹 서버이자 서블릿 엔진입니다. 우리의 목표는 HTTP, HTTP/2, WebSocket과 같은 웹...
jetty_9.4.31_CVE-2023-26048
Eclipse Jetty 정식 저장소 이것은 Jetty 프로젝트의 정식 저장소입니다. 자유롭게 포크하고 기여하세요! 패치 또는 풀 리퀘스트를 제출하시겠습니까? Eclipse Contributor Agreement ECA가 등록되어 있는지 확인하십시오. eclipse.org/legal/ecafaq 프로젝트 설명 Jetty는 경량이면서도 확장성이 뛰어난 자바 기반 웹 서버 및 서블릿 엔진입니다. 우리의 목표는 HTTP, HTTP/2, WebSocket과 같은 웹 프로토콜을 대용량 저지연 방식으로 지원하여 최대 성능을 제공하면서도...
AlmaLinux 9.2 [TuxCare] Security Update: pki-servlet-4.0-api / pki-servlet-engine Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1775646020)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1775646020 advisory. - Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication formerly...
CVE-2026-56122
Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with dot-dot-slash sequences that are not sanitized when serving static files from the configured webroot. Attackers can traver...
EUVD-2026-39397
Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with dot-dot-slash sequences that are not sanitized when serving static files from the configured webroot. Attackers can traver...
CVE-2026-56122
Winstone Servlet Engine up to version 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with dot-dot-slash sequences not sanitized when serving static files from the configured webroot. Attackers can traverse ...
PT-2026-52437
Name of the Vulnerable Software and Affected Versions Winstone Servlet Engine versions prior to 0.9.11 Description A path traversal flaw exists when serving static files from the configured webroot. Unauthenticated attackers can read arbitrary files accessible to the servlet engine process,...
CVE-2026-56122: Improper Limitation of a Pathname to a Restricted Directory
Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with dot-dot-slash sequences that are not sanitized when serving static files from the configured webroot. Attackers can traver...
CLSA-2026-1775646020 Update of pki-servlet-engine
Bump release...
CLSA-2026-1769701085 pki-servlet-engine: Fix of CVE-2025-31651
CVE-2025-31651: fix improper neutralization of escape, meta or control sequences to avoid bypassing rewrite rules...
CLSA-2026-1768989206 pki-servlet-engine: Fix of CVE-2025-55752
CVE-2025-55752: fix improper normalization in RewriteValve to prevent path traversal attacks...
RHSA-2026:0293 Red Hat Security Advisory: pki-servlet-engine security update
Bulletin has no description...
RHSA-2026:0292 Red Hat Security Advisory: pki-servlet-engine security update
Bulletin has no description...
MiracleLinux 9 : pki-servlet-engine-9.0.50-1.el9_2.2 (AXSA:2025-10718:01)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10718:01 advisory. tomcat: RCE due to TOCTOU issue in JSP compilation CVE-2024-50379 Tenable has extracted the preceding description block directly from the MiracleLinux...
Important: Red Hat Security Advisory: pki-servlet-engine security update
An update for pki-servlet-engine is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Important: Red Hat Security Advisory: pki-servlet-engine security update
An update for pki-servlet-engine is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
EUVD-2009-3089
Malware in sbrugna...
EUVD-2008-4094
Malware in sbrugna...