Skip to content
OpenAdvisories

Archive

12 August 2012

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High —

    Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables

    Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.

  • High —

    Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons

    Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.

  • High —

    Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters

    Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.