Логотип exploitDog
bind:"CVE-2023-45648" OR bind:"CVE-2023-41080" OR bind:"CVE-2023-42795" OR bind:"CVE-2023-42794"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2023-45648" OR bind:"CVE-2023-41080" OR bind:"CVE-2023-42795" OR bind:"CVE-2023-42794"

Количество 33

Количество 33

redos логотип

ROS-20240328-18

больше 1 года назад

Уязвимость tomcat

CVSS3: 4.8
EPSS: Средний
ubuntu логотип

CVE-2023-42794

около 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
EPSS: Низкий
redhat логотип

CVE-2023-42794

около 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
EPSS: Низкий
nvd логотип

CVE-2023-42794

около 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Other, EOL versions may also be affected. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
EPSS: Низкий
debian логотип

CVE-2023-42794

около 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork ...

CVSS3: 5.9
EPSS: Низкий
ubuntu логотип

CVE-2023-42795

около 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
EPSS: Низкий
redhat логотип

CVE-2023-42795

около 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2023-42795

около 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2023-42795

около 2 лет назад

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling vario ...

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-jm7m-8jh6-29hp

около 2 лет назад

Apache Tomcat Incomplete Cleanup vulnerability

CVSS3: 5.9
EPSS: Низкий
fstec логотип

BDU:2023-06729

около 2 лет назад

Уязвимость компонента Commons FileUpload сервера приложений Apache Tomcat, существующая из-за неполной очистки временных или вспомогательных ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-g8pj-r55q-5c2v

около 2 лет назад

Apache Tomcat Incomplete Cleanup vulnerability

CVSS3: 5.3
EPSS: Низкий
fstec логотип

BDU:2023-06728

около 2 лет назад

Уязвимость сервера приложений Apache Tomcat существует из-за неполной очистки временных или вспомогательных ресурсов, позволяющая нарушителю раскрыть защищаемую информацию

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redos логотип
ROS-20240328-18

Уязвимость tomcat

CVSS3: 4.8
11%
Средний
больше 1 года назад
ubuntu логотип
CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
0%
Низкий
около 2 лет назад
redhat логотип
CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full. Other, EOL versions may also be affected. Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.9
0%
Низкий
около 2 лет назад
debian логотип
CVE-2023-42794

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork ...

CVSS3: 5.9
0%
Низкий
около 2 лет назад
ubuntu логотип
CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
1%
Низкий
около 2 лет назад
redhat логотип
CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
1%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling process leading to information leaking from the current request/response to the next. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.

CVSS3: 5.3
1%
Низкий
около 2 лет назад
debian логотип
CVE-2023-42795

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling vario ...

CVSS3: 5.3
1%
Низкий
около 2 лет назад
github логотип
GHSA-jm7m-8jh6-29hp

Apache Tomcat Incomplete Cleanup vulnerability

CVSS3: 5.9
0%
Низкий
около 2 лет назад
fstec логотип
BDU:2023-06729

Уязвимость компонента Commons FileUpload сервера приложений Apache Tomcat, существующая из-за неполной очистки временных или вспомогательных ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
0%
Низкий
около 2 лет назад
github логотип
GHSA-g8pj-r55q-5c2v

Apache Tomcat Incomplete Cleanup vulnerability

CVSS3: 5.3
1%
Низкий
около 2 лет назад
fstec логотип
BDU:2023-06728

Уязвимость сервера приложений Apache Tomcat существует из-за неполной очистки временных или вспомогательных ресурсов, позволяющая нарушителю раскрыть защищаемую информацию

CVSS3: 7.5
1%
Низкий
около 2 лет назад

Уязвимостей на страницу