Caucho
10 CVEs across 1 Caucho products. Browse Caucho vulnerabilities, severities, and proof-of-concept exploits.
Caucho products with known CVEs
Caucho CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2021-44138 | High | 7.5 | 2022-04-04 | There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary… |
CVE-2014-2966 | | | 2014-07-26 | The ISO-8859-1 encoder in Resin Pro before 4.0.40 does not properly perform Unicode transformations, which allows remote attackers to bypass intended text rest… |
CVE-2012-2969 | | | 2012-08-12 | Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %… |
CVE-2012-2968 | | | 2012-08-12 | Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories vi… |
CVE-2012-2967 | | | 2012-08-12 | Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspeci… |
CVE-2012-2966 | | | 2012-08-12 | Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecifie… |
CVE-2012-2965 | | | 2012-08-12 | Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and… |
CVE-2010-2087 | | | 2010-05-27 | Oracle Mojarra 1.2_14 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, does not properly handle an unencrypted vie… |
CVE-2010-2032 | | | 2010-05-24 | Multiple cross-site scripting (XSS) vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, and possibly other… |
CVE-2008-2462 | | | 2008-06-30 | Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers t… |
CVE-2004-0281 | | | 2004-11-23 | Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "… |