Количество 20
Количество 20
ELSA-2014-0865
ELSA-2014-0865: tomcat6 security and bug fix update (MODERATE)
ELSA-2014-0827
ELSA-2014-0827: tomcat security update (MODERATE)
CVE-2014-0096
java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2014-0096
java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2014-0096
java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2014-0096
java/org/apache/catalina/servlets/DefaultServlet.java in the default s ...
GHSA-qprx-q2r7-3rx6
Improper Input Validation in Apache Tomcat
BDU:2015-00406
Уязвимость программного обеспечения Apache Tomcat, позволяющая удаленному злоумышленнику нарушить конфиденциальность защищаемой информации
CVE-2014-0099
Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
CVE-2014-0099
Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
CVE-2014-0099
Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
CVE-2014-0099
Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apac ...
CVE-2014-0075
Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.
CVE-2014-0075
Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.
CVE-2014-0075
Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.
CVE-2014-0075
Integer overflow in the parseChunkHeader function in java/org/apache/c ...
GHSA-xh5x-j8jf-pcpx
Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat
GHSA-475f-74wp-pqv5
Integer Overflow or Wraparound in Apache Tomcat
BDU:2015-00408
Уязвимость программного обеспечения Apache Tomcat, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
BDU:2015-00407
Уязвимость программного обеспечения Apache Tomcat, позволяющая удаленному злоумышленнику нарушить защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ELSA-2014-0865 ELSA-2014-0865: tomcat6 security and bug fix update (MODERATE) | почти 11 лет назад | ||
| ELSA-2014-0827 ELSA-2014-0827: tomcat security update (MODERATE) | почти 11 лет назад | ||
 | CVE-2014-0096 java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. | CVSS2: 4.3 | 2% Низкий | около 11 лет назад |
 | CVE-2014-0096 java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. | CVSS2: 2.1 | 2% Низкий | около 11 лет назад |
 | CVE-2014-0096 java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. | CVSS2: 4.3 | 2% Низкий | около 11 лет назад |
| CVE-2014-0096 java/org/apache/catalina/servlets/DefaultServlet.java in the default s ... | CVSS2: 4.3 | 2% Низкий | около 11 лет назад |
| GHSA-qprx-q2r7-3rx6 Improper Input Validation in Apache Tomcat | 2% Низкий | около 3 лет назад | |
 | BDU:2015-00406 Уязвимость программного обеспечения Apache Tomcat, позволяющая удаленному злоумышленнику нарушить конфиденциальность защищаемой информации | CVSS2: 4.3 | 2% Низкий | около 11 лет назад |
| CVE-2014-0099 Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header. | CVSS2: 4.3 | 70% Средний | около 11 лет назад |
| CVE-2014-0099 Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header. | CVSS2: 5.8 | 70% Средний | около 11 лет назад |
| CVE-2014-0099 Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header. | CVSS2: 4.3 | 70% Средний | около 11 лет назад |
| CVE-2014-0099 Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apac ... | CVSS2: 4.3 | 70% Средний | около 11 лет назад |
| CVE-2014-0075 Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data. | CVSS2: 5 | 88% Высокий | около 11 лет назад |
| CVE-2014-0075 Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data. | CVSS2: 4.3 | 88% Высокий | около 11 лет назад |
| CVE-2014-0075 Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data. | CVSS2: 5 | 88% Высокий | около 11 лет назад |
| CVE-2014-0075 Integer overflow in the parseChunkHeader function in java/org/apache/c ... | CVSS2: 5 | 88% Высокий | около 11 лет назад |
| GHSA-xh5x-j8jf-pcpx Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat | 70% Средний | около 3 лет назад | |
| GHSA-475f-74wp-pqv5 Integer Overflow or Wraparound in Apache Tomcat | 88% Высокий | около 3 лет назад | |
| BDU:2015-00408 Уязвимость программного обеспечения Apache Tomcat, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации | CVSS2: 5 | 88% Высокий | около 11 лет назад |
| BDU:2015-00407 Уязвимость программного обеспечения Apache Tomcat, позволяющая удаленному злоумышленнику нарушить защищаемой информации | CVSS2: 4.3 | 70% Средний | около 11 лет назад |
Уязвимостей на страницу