Most recent entries from all

bdu:2017-01545

certfr-2017-avi-370 — De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoqu…

certfr-2017-avi-370

cnvd-2016-11583

EUVD-2026-256348

fkie_cve-2016-8735

Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.

GHSA-cw54-59pw-4g8c — Apache Tomcat Improper Access Control vulnerability

Affected: Maven: org.apache.tomcat:tomcat-catalina-jmx-remote, Maven: org.apache.tomcat:tomcat-catalina

gsd-2016-8735

RHSA-2017:0455 — Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 security and enhancement update

tomcat: timing attack in Realm implementation tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalation tomcat: Usage of vulnerable FileUpload package can result in denial of service tomcat: security manager bypass via IntrospectHelper utility function tomcat: tomcat writable config files allow privilege escalation tomcat: system property disclosure tomcat: security manager bypass via JSP Servlet config parameters tomcat: unrestricted access to global resources tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests tomcat: Remote code execution vulnerability in JmxRemoteLifecycleListener tomcat: information disclosure due to incorrect Processor sharing

SUSE-SU-2016:3079-1 — Security update for tomcat

Security update for tomcat

UBUNTU-CVE-2016-8735

Affected: Ubuntu:14.04:LTS: tomcat7, Ubuntu:Pro:14.04:LTS: tomcat6, Ubuntu:16.04:LTS: tomcat6, Ubuntu:16.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat8

WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.