Lucene search
+L

4838 matches found

Cvelist
Cvelist
•added 2009/11/23 5:00 p.m.•42 views

CVE-2009-4052

Multiple cross-site scripting XSS vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 th...

5.6AI score0.01982EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/11/23 12:00 a.m.•7 views

CVE-2009-4052: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 th...

4.3CVSS5.9AI score0.01982EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2009/11/11 12:00 a.m.•86 views

RedHat Security Advisory RHSA-2009:1563

The remote host is missing updates announced in advisory RHSA-2009:1563. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. It was discovered that the Red Hat Security Advisory RHSA-2008:0195 did not address all possible flaws in the way Tomcat handle...

5CVSS5.5AI score0.9444EPSS
SaveExploits10References3
RedHat Linux
RedHat Linux
•added 2009/11/09 3:26 p.m.•85 views

Important: Red Hat Security Advisory: tomcat security update

Updated tomcat packages that fix several security issues are now available for Red Hat Application Server v2. This update has been rated as having important security impact by the Red Hat Security Response Team. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP...

5CVSS6.1AI score0.9444EPSS
SaveExploits11References8
Check Point Advisories
Check Point Advisories
•added 2009/11/01 12:00 a.m.•33 views

Apache Tomcat URIencoding Directory Traversal (CVE-2007-0450; CVE-2008-2938)

Apache Tomcat is an implementation of the Java Servlet and JavaServer pages technologies. The software provides the servlet container used in development and deployment of Java based web applications. Users access Tomcat applications using web browsers that communicate to the server via the HTTP...

5CVSS6.7AI score0.99708EPSS
SaveExploits26
zdt
zdt
•added 2009/10/26 12:00 a.m.•124 views

jetty 6.x - 7.x xss, information disclosure, injection

Exploit for jsp platform in category web applications ====================================================== jetty 6.x - 7.x xss, information disclosure, injection ====================================================== Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in...

7.1AI score0.17413EPSS
SaveExploits8
securityvulns
securityvulns
•added 2009/10/26 12:00 a.m.•215 views

Jetty 6.x and 7.x Multiple Vulnerabilities

Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor http://www.mortbay.org/jetty/ Advisory...

5CVSS8.1AI score0.17413EPSS
SaveExploits8
Packet Storm
Packet Storm
•added 2009/10/26 12:00 a.m.•121 views

Jetty 6.x / 7.x Information Disclosure / XSS

Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor http://www.mortbay.org/jetty/ Advisory...

5CVSS7.7AI score0.17413EPSS
SaveExploits8
seebug.org
seebug.org
•added 2009/10/26 12:00 a.m.•176 views

jetty 6.x - 7.x xss information disclosure injection

No description provided by source. Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor http://www.mortbay.org/jetty/ Advisory...

5CVSS7.7AI score0.17413EPSS
SaveExploits8
Exploit DB
Exploit DB
•added 2009/10/26 12:00 a.m.•183 views

jetty 6.x < 7.x - Cross-Site Scripting / Information Disclosure / Injection

Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor http://www.mortbay.org/jetty/ Advisory...

4.3CVSS6.6AI score0.03044EPSS
SaveExploits2
OpenVAS
OpenVAS
•added 2009/10/22 12:00 a.m.•59 views

HP-UX Update for Tomcat Servlet Engine HPSBUX02466

Check for the Version of Tomcat Servlet Engine OpenVAS Vulnerability Test HP-UX Update for Tomcat Servlet Engine HPSBUX02466 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

5CVSS5.5AI score0.9444EPSS
SaveExploits9References2
OpenVAS
OpenVAS
•added 2009/10/22 12:00 a.m.•79 views

HP-UX Update for Tomcat Servlet Engine HPSBUX02466

Check for the Version of Tomcat Servlet Engine OpenVAS Vulnerability Test HP-UX Update for Tomcat Servlet Engine HPSBUX02466 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

5CVSS5.5AI score0.9444EPSS
SaveExploits9References2
RedHat Linux
RedHat Linux
•added 2009/10/14 4:15 p.m.•71 views

Important: Red Hat Security Advisory: tomcat6 security update

Updated tomcat6 packages that fix several security issues are now available for JBoss Enterprise Web Server 1.0.0 for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Apache Tomcat is a servlet container for th...

5CVSS6.1AI score0.9444EPSS
SaveExploits8References6
OpenVAS
OpenVAS
•added 2009/10/10 12:00 a.m.•85 views

SLES9: Security update for PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: modphp4-core apache2-modphp4 php4-servlet php4 php4-imap php4-mysql php4-session apache-modphp4 modphp4-servlet For more information, please visit the...

10CVSS0.5AI score0.10042EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2009/10/10 12:00 a.m.•40 views

SLES9: Security update for PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: modphp4-servlet apache2-modphp4 php4-servlet apache-modphp4 php4-session php4-imap php4-mysql php4 modphp4-core More details may also be found by searching f...

7.5AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2009/10/10 12:00 a.m.•32 views

SLES9: Security update for Security update PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache-modphp4 apache2-modphp4 modphp4 modphp4-apache2 modphp4-core modphp4-servlet php4 php4-bcmath php4-bz2 php4-calendar php4-ctype php4-curl php4-dba...

7.5AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2009/10/10 12:00 a.m.•22 views

SLES9: Security update for PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: modphp4-core php4-mysql apache-modphp4 apache2-modphp4 php4 php4-session modphp4-servlet php4-imap php4-servlet More details may also be found by searching f...

7.5AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2009/10/10 12:00 a.m.•34 views

SLES9: Security update for PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: modphp4-servlet apache2-modphp4 php4-servlet apache-modphp4 php4-session php4-imap php4-mysql php4 modphp4-core More details may also be found by searching f...

7.5AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2009/10/10 12:00 a.m.•94 views

SLES9: Security update for PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: modphp4-core php4-exif php4-imap php4 php4-mbstring modphp4-servlet php4-mysql php4-servlet php4-fastcgi php4-session php4-devel apache-modphp4 apache2-modph...

2.6CVSS6.4AI score0.03774EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2009/10/10 12:00 a.m.•69 views

SLES9: Security update for PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-servlet php4-mysql php4-fastcgi php4-exif apache2-modphp4 modphp4-servlet apache-modphp4 modphp4-core php4 php4-session php4-imap php4-devel php4-sysvsh...

10CVSS9.6AI score0.10042EPSS
SaveExploits1References1
Rows per page
Query Builder