Lucene search
+L

2492 matches found

CNVD
CNVD
added 2016/12/14 12:0 a.m.6 views

Struts2 Remote Command Execution Vulnerability in Shenzhen Pengjiao Project Management System

Shenzhen Pengjiao Project Management System is a product of Shenzhen Pengjiao Management Consultant Co., Ltd, which mainly serves primary and secondary schools, private educational institutions, government education and so on. A Struts2 remote command execution vulnerability exists in the Shenzhe...

7.3AI score
SaveExploits0
myhack58
myhack58
added 2016/12/12 12:0 a.m.22 views

Jingdong response to data breaches rumors: from 2013 Struts 2 security vulnerability-vulnerability warning-the black bar safety net

Yesterday the media reported, saying that suspected jingdong 12 G data was leaked, involving the user name, password, email, QQ number, telephone number, ID card, etc. multiple dimensions of information on this, jingdong represented by the preliminary determination, the data from 2013 Struts 2...

1.7AI score
SaveExploits0
CNVD
CNVD
added 2016/12/08 12:0 a.m.29 views

Apache Struts Denial of Service Vulnerability (CNVD-2016-12020)

Apache Struts is the United States Apache Apache Software Foundation is responsible for maintaining an open source project , is a set of open source MVC framework for creating enterprise-class Java Web applications , mainly provides two versions of the framework products , Struts 1 and Struts 2. ...

5.9CVSS6.7AI score0.03233EPSS
SaveExploits0References1
F5 Networks
F5 Networks
added 2016/11/28 12:0 a.m.68 views

SOL43167094 - Apache Struts 2 vulnerability CVE-2016-6795

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

9.8CVSS2.8AI score0.08153EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.27 views

Apache Struts DoS Vulnerability (S2-041) - Linux

Apache Struts is prone to a Denial of Service DoS vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

5.3CVSS5.6AI score0.10282EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.36 views

Apache Struts 1.x - 1.3.10 Multiple Vulnerabilities - Linux

Apache Struts is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.2CVSS8.3AI score0.25737EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.28 views

Apache Struts 1.x - 1.3.10 Multiple Vulnerabilities - Windows

Apache Struts is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.2CVSS8.3AI score0.25737EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.44 views

Apache Struts Security Update (S2-037, S2-038, S2-039, S2-040)

Apache Struts is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.2AI score0.16611EPSS
SaveExploits2References12
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.49 views

Apache Struts Multiple Vulnerabilities (S2-037, S2-038, S2-039, S2-040) - Linux

Apache Struts is prone to multiple vulnerabilities. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.8CVSS8.4AI score0.16611EPSS
SaveExploits2References8
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.30 views

Apache Struts Unspecified Vulnerability (S2-035) - Linux

Apache Struts is prone to an unspecified vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.8CVSS8.9AI score0.06549EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.20 views

Apache Struts Security Update (S2-041)

Apache Struts is prone to a Denial of Service DoS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

5.3CVSS5.5AI score0.10282EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2016/11/18 12:0 a.m.41 views

Apache Struts Security Update (S2-035)

Apache Struts is prone to an unspecified vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

9.8CVSS9.5AI score0.06549EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2016/10/27 12:0 a.m.65 views

Apache Struts 2.3.1 < 2.3.31 / 2.5.x < 2.5.5 Convention Plugin Path Traversal RCE (S2-042)

The version of Apache Struts running on the remote host is 2.3.1 prior to 2.3.31 or 2.5.x prior to 2.5.5. It is, therefore, affected by a remote code execution vulnerability in the Convention plugin due to a flaw that allows traversing outside of a restricted path. An unauthenticated, remote...

9.8CVSS9.4AI score0.08153EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2016/10/26 12:0 a.m.71 views

IBM WebSphere Application Server 7.0 < 7.0.0.33 Multiple Vulnerabilities

Binary data 9699.prm...

7.8CVSS7.2AI score0.96121EPSS
SaveExploits16References17
CNVD
CNVD
added 2016/10/20 12:0 a.m.8 views

Apache Struts Convention Plugin Path Traversal Vulnerability

Struts2 is an extensible framework for building enterprise-class Jave Web applications. Struts 2.3.20 - 2.3.31 has a path traversal vulnerability in the Convention plugin, which can be exploited by an attacker to conduct path traversal and code execution attacks on the server side via a construct...

9.8CVSS9.4AI score0.08153EPSS
SaveExploits0References1
Symantec
Symantec
added 2016/10/17 12:0 a.m.50 views

Novell NetIQ Sentinel CVE-2016-1000031 Remote Code Execution Vulnerability

Description Novell NetIQ Sentinel is prone to a security vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Novell NetIQ Sentinel version 7.4x are vulnerable. Technologies Affected Apache Commons FileUpload 1.0...

7.5CVSS0.8AI score0.33686EPSS
SaveExploits0References2Affected Software50
NVD
NVD
added 2016/10/03 3:59 p.m.23 views

CVE-2016-4436

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

9.8CVSS9.6AI score0.06549EPSS
SaveExploits0References5
OSV
OSV
added 2016/10/03 3:59 p.m.9 views

CVE-2016-4436

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

9.8CVSS9.6AI score
SaveExploits0References5
Prion
Prion
added 2016/10/03 3:59 p.m.31 views

Input validation

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

7.5CVSS7.3AI score0.06549EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2016/10/03 3:59 p.m.35 views

CVE-2016-4436

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

9.8CVSS7.2AI score0.06549EPSS
SaveExploits0References2
Rows per page
Query Builder