Debian

Debian Linux

9947 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2016-0763

  • EPSS 0.29%
  • Veröffentlicht 25.02.2016 01:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, wh...

8.8

CVE-2016-0714

  • EPSS 6.01%
  • Veröffentlicht 25.02.2016 01:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restric...

4.3

CVE-2016-0706

  • EPSS 1.54%
  • Veröffentlicht 25.02.2016 01:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote aut...

8.8

CVE-2015-5351

  • EPSS 1.74%
  • Veröffentlicht 25.02.2016 01:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protec...

8.1

CVE-2015-5346

  • EPSS 36.17%
  • Veröffentlicht 25.02.2016 01:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote attackers to ...

5.3

CVE-2015-5345

  • EPSS 14.82%
  • Veröffentlicht 25.02.2016 01:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the existence o...

4.3

CVE-2015-5174

  • EPSS 3.69%
  • Veröffentlicht 25.02.2016 01:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.....

7.5

CVE-2013-7448

  • EPSS 0.55%
  • Veröffentlicht 23.02.2016 19:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get.

6.5

CVE-2016-2037

  • EPSS 19.45%
  • Veröffentlicht 22.02.2016 15:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file.

10

CVE-2016-1629

  • EPSS 3.21%
  • Veröffentlicht 21.02.2016 18:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors.