Логотип exploitDog
bind:"CVE-2023-45648" OR bind:"CVE-2023-41080" OR bind:"CVE-2023-42795" OR bind:"CVE-2023-42794"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2023-45648" OR bind:"CVE-2023-41080" OR bind:"CVE-2023-42795" OR bind:"CVE-2023-42794"

Количество 33

Количество 33

redos логотип

ROS-20240328-18

почти 2 года назад

Уязвимость tomcat

CVSS3: 4.8
EPSS: Средний
ubuntu логотип

CVE-2023-42794

больше 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Other, EOL versions may also be affected. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
EPSS: Низкий
redhat логотип

CVE-2023-42794

больше 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
EPSS: Низкий
nvd логотип

CVE-2023-42794

больше 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Other, EOL versions may also be affected. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
EPSS: Низкий
debian логотип

CVE-2023-42794

больше 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork ...

CVSS3: 5.9
EPSS: Низкий
ubuntu логотип

CVE-2023-42795

больше 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
EPSS: Низкий
redhat логотип

CVE-2023-42795

больше 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2023-42795

больше 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2023-42795

больше 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling vario ...

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-jm7m-8jh6-29hp

больше 2 лет назад

Apache Tomcat Incomplete Cleanup vulnerability

CVSS3: 5.9
EPSS: Низкий
fstec логотип

BDU:2023-06729

больше 2 лет назад

Уязвимость компонента Commons FileUpload сервера приложений Apache Tomcat, существующая из-за неполной очистки временных или вспомогательных ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-g8pj-r55q-5c2v

больше 2 лет назад

Apache Tomcat Incomplete Cleanup vulnerability

CVSS3: 5.3
EPSS: Низкий
fstec логотип

BDU:2023-06728

больше 2 лет назад

Уязвимость сервера приложений Apache Tomcat существует из-за неполной очистки временных или вспомогательных ресурсов, позволяющая нарушителю раскрыть защищаемую информацию

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redos логотип
ROS-20240328-18

Уязвимость tomcat

CVSS3: 4.8
11%
Средний
почти 2 года назад
ubuntu логотип
CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Other, EOL versions may also be affected. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
0%
Низкий
больше 2 лет назад
redhat логотип
CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Other, EOL versions may also be affected. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork ...

CVSS3: 5.9
0%
Низкий
больше 2 лет назад
ubuntu логотип
CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
1%
Низкий
больше 2 лет назад
redhat логотип
CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
1%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
1%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling vario ...

CVSS3: 5.3
1%
Низкий
больше 2 лет назад
github логотип
GHSA-jm7m-8jh6-29hp

Apache Tomcat Incomplete Cleanup vulnerability

CVSS3: 5.9
0%
Низкий
больше 2 лет назад
fstec логотип
BDU:2023-06729

Уязвимость компонента Commons FileUpload сервера приложений Apache Tomcat, существующая из-за неполной очистки временных или вспомогательных ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
0%
Низкий
больше 2 лет назад
github логотип
GHSA-g8pj-r55q-5c2v

Apache Tomcat Incomplete Cleanup vulnerability

CVSS3: 5.3
1%
Низкий
больше 2 лет назад
fstec логотип
BDU:2023-06728

Уязвимость сервера приложений Apache Tomcat существует из-за неполной очистки временных или вспомогательных ресурсов, позволяющая нарушителю раскрыть защищаемую информацию

CVSS3: 7.5
1%
Низкий
больше 2 лет назад

Уязвимостей на страницу