Поиск уязвимостей
Количество 1 544
Количество 1 544
GHSA-h6fc-48rj-7qqh
Apache Tomcat - Digest authenticator will authenticate any unknown user
GHSA-h6c8-x5r3-pm88
Apache Tomcat Unrestricted file upload vulnerability
GHSA-h6c8-rg87-f3pc
Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users
GHSA-h468-7pvh-8vr8
Apache Tomcat: Padding Oracle vulnerability in EncryptInterceptor
GHSA-h3x4-894j-xpx5
Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability
GHSA-h3mr-2w3q-jcv9
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58, 9.0.121, which fixes the issue.
GHSA-h3gc-qfqq-6h8f
Apache Tomcat - DoS in multipart upload
GHSA-h2fw-rfh5-95r3
Apache Tomcat - CGI security constraint bypass
GHSA-gx5v-xp9w-j4cg
Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling
GHSA-gqp3-2cvr-x8m3
Apache Tomcat Improper Resource Shutdown or Release vulnerability
GHSA-ggx9-4728-588r
Apache Tomcat Directory Traversal vulnerability
GHSA-gcx9-497g-6cp6
Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability
GHSA-g8qj-vp23-742m
Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121 which fix the issue.
GHSA-g8pj-r55q-5c2v
Apache Tomcat Incomplete Cleanup vulnerability
GHSA-g77g-vjjm-x83j
Apache Tomcat Example Application CSRF and XSS Vulnerabilities
GHSA-fv25-8xcx-gqjc
Apache Tomcat - WebSocket authentication header exposure
GHSA-fpj8-gq4v-p354
Apache Tomcat - Client certificate verification bypass
GHSA-fj6c-prgj-gr3r
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
GHSA-ff77-26x5-69cr
Apache Tomcat Rewrite rule bypass
GHSA-fccv-jmmp-qg76
Apache Tomcat Improper Input Validation vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-h6fc-48rj-7qqh Apache Tomcat - Digest authenticator will authenticate any unknown user | CVSS3: 9.8 | 1% Низкий | 6 месяцев назад |
| GHSA-h6c8-x5r3-pm88 Apache Tomcat Unrestricted file upload vulnerability | 14% Средний | больше 4 лет назад | |
| GHSA-h6c8-rg87-f3pc Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users | 9% Низкий | больше 4 лет назад | |
| GHSA-h468-7pvh-8vr8 Apache Tomcat: Padding Oracle vulnerability in EncryptInterceptor | CVSS3: 7.5 | 9% Низкий | 7 месяцев назад |
| GHSA-h3x4-894j-xpx5 Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability | CVSS3: 9.1 | 1% Низкий | 3 месяца назад |
| GHSA-h3mr-2w3q-jcv9 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58, 9.0.121, which fixes the issue. | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
| GHSA-h3gc-qfqq-6h8f Apache Tomcat - DoS in multipart upload | CVSS3: 7.5 | 30% Средний | больше 1 года назад |
| GHSA-h2fw-rfh5-95r3 Apache Tomcat - CGI security constraint bypass | 3% Низкий | больше 1 года назад | |
| GHSA-gx5v-xp9w-j4cg Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
| GHSA-gqp3-2cvr-x8m3 Apache Tomcat Improper Resource Shutdown or Release vulnerability | CVSS3: 7.5 | 4% Низкий | около 1 года назад |
| GHSA-ggx9-4728-588r Apache Tomcat Directory Traversal vulnerability | 10% Низкий | больше 4 лет назад | |
| GHSA-gcx9-497g-6cp6 Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability | CVSS3: 9.1 | 1% Низкий | 3 месяца назад |
| GHSA-g8qj-vp23-742m Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121 which fix the issue. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
| GHSA-g8pj-r55q-5c2v Apache Tomcat Incomplete Cleanup vulnerability | CVSS3: 5.3 | 3% Низкий | около 3 лет назад |
| GHSA-g77g-vjjm-x83j Apache Tomcat Example Application CSRF and XSS Vulnerabilities | 2% Низкий | больше 4 лет назад | |
| GHSA-fv25-8xcx-gqjc Apache Tomcat - WebSocket authentication header exposure | CVSS3: 7.3 | 1% Низкий | 6 месяцев назад |
| GHSA-fpj8-gq4v-p354 Apache Tomcat - Client certificate verification bypass | CVSS3: 9.1 | 0% Низкий | 9 месяцев назад |
| GHSA-fj6c-prgj-gr3r Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat | 1% Низкий | больше 4 лет назад | |
| GHSA-ff77-26x5-69cr Apache Tomcat Rewrite rule bypass | 4% Низкий | больше 1 года назад | |
| GHSA-fccv-jmmp-qg76 Apache Tomcat Improper Input Validation vulnerability | CVSS3: 7.5 | 3% Низкий | почти 3 года назад |
Уязвимостей на страницу