Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

caucho resin 2.1.snap vulnerabilities and exploits

(subscribe to this query)
668
VMScore
CVE-2012-2965
Caucho Quercus, as distributed in Resin prior to 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.
Caucho Resin 4.0.6Caucho Resin 4.0.12Caucho Resin 4.0.2Caucho Resin 4.0.21Caucho Resin 4.0.13Caucho Resin 4.0.15Caucho Resin 4.0.20Caucho Resin 3.1.12Caucho Resin 3.1.10Caucho Resin 3.1.8Caucho Resin 3.0.13Caucho Resin 3.0.11Caucho Resin 3.0.20Caucho Resin 3.0.19Caucho Resin 3.0.4Caucho Resin 2.1.12Caucho Resin 2.1.8Caucho Resin 2.1.10Caucho Resin 2.1.5Caucho Resin 2.0.3Caucho Resin 2.1.1Caucho Resin 4.0.10
668
VMScore
CVE-2012-2966
Caucho Quercus, as distributed in Resin prior to 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.
Caucho Resin 4.0.5Caucho Resin 4.0.12Caucho Resin 4.0.11Caucho Resin 4.0.10Caucho Resin 4.0.27Caucho Resin 4.0.13Caucho Resin 4.0.14Caucho Resin 4.0.15Caucho Resin 4.0.16Caucho Resin 3.1.10Caucho Resin 3.1.7Caucho Resin 3.1.8Caucho Resin 3.0.1Caucho Resin 3.0.18Caucho Resin 3.0.19Caucho Resin 3.1.1Caucho Resin 3.1.0Caucho Resin 2.1.8Caucho Resin 2.1.7Caucho Resin 2.1.10Caucho Resin 2.1.9Caucho Resin 2.1.1
668
VMScore
CVE-2012-2967
Caucho Quercus, as distributed in Resin prior to 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
Caucho ResinCaucho Resin 4.0.8Caucho Resin 4.0.22Caucho Resin 4.0.23Caucho Resin 4.0.24Caucho Resin 4.0.25Caucho Resin 3.1.5Caucho Resin 3.1.6Caucho Resin 3.0.2Caucho Resin 3.1.4Caucho Resin 3.0.11Caucho Resin 3.0.16Caucho Resin 3.0.17Caucho Resin 3.0.14Caucho Resin 3.0.15Caucho Resin 2.1.13Caucho Resin 2.1.snapCaucho Resin 2.1.11Caucho Resin 2.1.16Caucho Resin 2.0.5Caucho Resin 2.0.0Caucho Resin 2.0.2
445
VMScore
CVE-2012-2968
Directory traversal vulnerability in Caucho Quercus, as distributed in Resin prior to 4.0.29, allows remote malicious users to create files in arbitrary directories via a .. (dot dot) in a pathname within an HTTP request.
Caucho Resin 4.0.4Caucho Resin 4.0.3Caucho Resin 4.0.2Caucho Resin 4.0.1Caucho Resin 4.0.18Caucho Resin 4.0.19Caucho Resin 4.0.20Caucho Resin 3.1.13Caucho Resin 3.0.6Caucho Resin 3.0.7Caucho Resin 3.0.12Caucho Resin 3.0.13Caucho Resin 3.1.2Caucho Resin 3.0.5Caucho Resin 3.0.4Caucho Resin 3.0.3Caucho Resin 2.1.3Caucho Resin 2.1.6Caucho Resin 2.1.5Caucho Resin 2.0.4Caucho Resin 2.0.3Caucho Resin 4.0.11
570
VMScore
CVE-2012-2969
Caucho Quercus, as distributed in Resin prior to 4.0.29, allows remote malicious users to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request.
Caucho Resin 4.0.5Caucho Resin 4.0.12Caucho Resin 4.0.11Caucho Resin 4.0.10Caucho Resin 4.0.13Caucho Resin 4.0.14Caucho Resin 4.0.15Caucho Resin 4.0.16Caucho Resin 4.0.8Caucho Resin 4.0.6Caucho Resin 4.0.9Caucho Resin 4.0.4Caucho Resin 4.0.24Caucho Resin 4.0.26Caucho Resin 4.0.18Caucho Resin 4.0.20Caucho Resin 3.1.6Caucho Resin 3.1.4Caucho Resin 3.1.10Caucho Resin 3.0.9Caucho Resin 3.0.7Caucho Resin 3.0.14
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook