Логотип exploitDog
bind:"CVE-2023-45648" OR bind:"CVE-2023-41080" OR bind:"CVE-2023-42795" OR bind:"CVE-2023-42794"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2023-45648" OR bind:"CVE-2023-41080" OR bind:"CVE-2023-42795" OR bind:"CVE-2023-42794"

Количество 33

Количество 33

redos логотип

ROS-20240328-18

около 1 года назад

Уязвимость tomcat

CVSS3: 4.8
EPSS: Средний
ubuntu логотип

CVE-2023-42794

больше 1 года назад

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
EPSS: Низкий
redhat логотип

CVE-2023-42794

больше 1 года назад

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
EPSS: Низкий
nvd логотип

CVE-2023-42794

больше 1 года назад

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
EPSS: Низкий
debian логотип

CVE-2023-42794

больше 1 года назад

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork ...

CVSS3: 5.9
EPSS: Низкий
ubuntu логотип

CVE-2023-42795

больше 1 года назад

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
EPSS: Низкий
redhat логотип

CVE-2023-42795

больше 1 года назад

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2023-42795

больше 1 года назад

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2023-42795

больше 1 года назад

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling vario ...

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-jm7m-8jh6-29hp

больше 1 года назад

Apache Tomcat Incomplete Cleanup vulnerability

CVSS3: 5.9
EPSS: Низкий
fstec логотип

BDU:2023-06729

больше 1 года назад

Уязвимость компонента Commons FileUpload сервера приложений Apache Tomcat, существующая из-за неполной очистки временных или вспомогательных ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-g8pj-r55q-5c2v

больше 1 года назад

Apache Tomcat Incomplete Cleanup vulnerability

CVSS3: 5.3
EPSS: Низкий
fstec логотип

BDU:2023-06728

больше 1 года назад

Уязвимость сервера приложений Apache Tomcat существует из-за неполной очистки временных или вспомогательных ресурсов, позволяющая нарушителю раскрыть защищаемую информацию

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redos логотип
ROS-20240328-18

Уязвимость tomcat

CVSS3: 4.8
11%
Средний
около 1 года назад
ubuntu логотип
CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
0%
Низкий
больше 1 года назад
redhat логотип
CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
0%
Низкий
больше 1 года назад
debian логотип
CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork ...

CVSS3: 5.9
0%
Низкий
больше 1 года назад
ubuntu логотип
CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
1%
Низкий
больше 1 года назад
redhat логотип
CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
1%
Низкий
больше 1 года назад
nvd логотип
CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
1%
Низкий
больше 1 года назад
debian логотип
CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling vario ...

CVSS3: 5.3
1%
Низкий
больше 1 года назад
github логотип
GHSA-jm7m-8jh6-29hp

Apache Tomcat Incomplete Cleanup vulnerability

CVSS3: 5.9
0%
Низкий
больше 1 года назад
fstec логотип
BDU:2023-06729

Уязвимость компонента Commons FileUpload сервера приложений Apache Tomcat, существующая из-за неполной очистки временных или вспомогательных ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
0%
Низкий
больше 1 года назад
github логотип
GHSA-g8pj-r55q-5c2v

Apache Tomcat Incomplete Cleanup vulnerability

CVSS3: 5.3
1%
Низкий
больше 1 года назад
fstec логотип
BDU:2023-06728

Уязвимость сервера приложений Apache Tomcat существует из-за неполной очистки временных или вспомогательных ресурсов, позволяющая нарушителю раскрыть защищаемую информацию

CVSS3: 7.5
1%
Низкий
больше 1 года назад

Уязвимостей на страницу