2717 matches found
CVE-2023-0669 Fortra GoAnywhere MFT License Response Servlet Command Injection
Fortra formerly, HelpSystems GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2...
CVE-2023-0669 Fortra GoAnywhere MFT License Response Servlet Command Injection
Fortra formerly, HelpSystems GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2...
CVE-2023-0669
Fortra GoAnywhere MFT is affected by CVE-2023-0669, a pre-authentication deserialization vulnerability in the License Response Servlet that enables remote code execution by deserializing attacker-controlled objects. Exploitation and PoCs exist in public exploits/analyses; vendors patched the issu...
Warning: Hackers Actively Exploiting Zero-Day in Fortra's GoAnywhere MFT
A zero-day vulnerability affecting Fortra's GoAnywhere MFT managed file transfer application is being actively exploited in the wild. Details of the flaw were first publicly shared by security reporter Brian Krebs on Mastodon. No public advisory has been published by Fortra. The vulnerability is ...
The vulnerability of Eclipse Jetty servlet containers arises from insufficient validation of input data, allowing attackers to cause failures in the proxy script.
The vulnerability of Eclipse Jetty servlet containers exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause failures in the proxy scenarios...
Spring Security < 5.5.7 / 5.6.x < 5.6.4 Authorization Bypass
The remote host contains a Spring Security version that is prior to 5.5.7 or 5.6.x prior to 5.6.4. It is, therefore, affected by an authorization bypass vulnerability. - In Spring Security versions 5.5.6 and 5.6.3 and older unsupported versions, RegexRequestMatcher can easily be misconfigured to ...
Input validation
A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due...
PT-2023-17402 · Cisco · Cisco Broadworks Application Delivery Platform +1
Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks Application Delivery Platform affected versions not specified Cisco BroadWorks Xtended Services Platform affected versions not specified Description: A vulnerability in the Device Management Servlet application could allow an...
Fixed in Apache Tomcat 9.0.71
Important: Apache Tomcat denial of service CVE-2023-24998 Apache Tomcat uses a packaged renamed copy of Apache Commons FileUpload to provide the file upload functionality defined in the Jakarta Servlet specification. Apache Tomcat was, therefore, also vulnerable to the Apache Commons FileUpload...
CVE-2014-125075
A vulnerability was found in gmail-servlet and classified as critical. This issue affects the function search of the file src/Model.java. The manipulation leads to sql injection. The identifier of the patch is 5d72753c2e95bb373aa86824939397dc25f679ea. It is recommended to apply a patch to fix thi...
Sql injection
A vulnerability was found in gmail-servlet and classified as critical. This issue affects the function search of the file src/Model.java. The manipulation leads to sql injection. The identifier of the patch is 5d72753c2e95bb373aa86824939397dc25f679ea. It is recommended to apply a patch to fix thi...
CVE-2014-125075
CVE-2014-125075 affects gmail-servlet, specifically the search function in src/Model.java, where a SQL injection vulnerability exists. The issue is described across multiple sources as a critical flaw in gmail-servlet leading to SQL injection. The patch identifier 5d72753c2e95bb373aa86824939397dc...
CVE-2014-125075 gmail-servlet Model.java search sql injection
A vulnerability was found in gmail-servlet and classified as critical. This issue affects the function search of the file src/Model.java. The manipulation leads to sql injection. The identifier of the patch is 5d72753c2e95bb373aa86824939397dc25f679ea. It is recommended to apply a patch to fix thi...
Cisco BroadWorks Application Delivery Platform and Xtended Services Platform Denial of Service Vulnerability
A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due...
PT-2023-10145 · Unknown · Gmail-Servlet
Name of the Vulnerable Software and Affected Versions: gmail-servlet affected versions not specified Description: A critical issue was found in the function search of the file src/Model.java, which leads to sql injection. Recommendations: At the moment, there is no information about a newer versi...
gmail-servlet SQL注入漏洞
gmail-servlet is a module by Chris McMahon Stone Personal Developer. A SQL injection vulnerability exists in gmail-servlet. An attacker could exploit this vulnerability to perform a sql injection attack...
CVE-2020-36634
This CVE (CVE-2020-36634) affects Indeed Engineering util up to version 1.0.33. The vulnerability resides in the function visit/appendTo of varexport/src/main/java/com/indeed/util/varexport/servlet/ViewExportedVariablesServlet.java, where input is mishandled and leads to cross-site scripting. It ...
PT-2022-9028 · Indeed · Indeed Engineering
Name of the Vulnerable Software and Affected Versions: Indeed Engineering util versions up to 1.0.33 Description: A problematic vulnerability has been found, affecting the function visit/appendTo of the file...
