Поиск уязвимостей

Apache Tomcat Directory Traversal vulnerability

Apache Tomcat Source Code Disclosure

Apache Tomcat Race Condition vulnerability

Improper Neutralization of Input During Web Page Generation in Apache Tomcat

Apache Tomcat Buffer Over-Read

Improper Handling of Exceptional Conditions in Apache Tomcat

Apache Tomcat Incomplete Cleanup vulnerability

Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet.

Cross-site scripting in Apache Tomcat

Authentication Bypass in Apache Tomcat

Improper Input Validation in Apache Tomcat

Cross-site scripting in Apache Tomcat

Apache Tomcat is vulnerable to HTTP request-smuggling

Improper Authentication in Apache Tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

Apache Tomcat Vulnerable to Improper Resource Shutdown or Release

Improper Authentication in Apache Tomcat

Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120, which fix the issue.

Apache Tomcat XSS Vulnerabilities in Examples Web Application

Apache Tomcat's rewrite valve has an Always-Incorrect Control Flow Implementation vulnerability