https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:53:20 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-02853 bdu:2020-02853 https://cve.radiocsirt.org/vuln/bdu:2020-02853 https://cve.radiocsirt.org/vuln/certfr-2020-avi-179 certfr-2020-avi-179 https://cve.radiocsirt.org/vuln/certfr-2020-avi-179 https://cve.radiocsirt.org/vuln/euvd-2026-35587 EUVD-2026-35587 https://cve.radiocsirt.org/vuln/euvd-2026-35587 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1745 <p>A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.</p> <p>A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-1745 https://cve.radiocsirt.org/vuln/ghsa-gv2w-88hx-8m9r <p><strong>Affected:</strong> Maven: io.undertow:undertow-core</p> <p>A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.</p> <p><strong>Affected:</strong> Maven: io.undertow:undertow-core</p> <p>A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-gv2w-88hx-8m9r https://cve.radiocsirt.org/vuln/gsd-2020-1745 gsd-2020-1745 https://cve.radiocsirt.org/vuln/gsd-2020-1745 https://cve.radiocsirt.org/vuln/rhsa-2020:0812 <p>undertow: AJP File Read/Inclusion Vulnerability</p> <p>undertow: AJP File Read/Inclusion Vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2020:0812 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1745 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow</p> <p>A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow</p> <p>A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1745 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375