Поиск уязвимостей
Количество 1 544
Количество 1 544
GHSA-82jr-6mfr-9vq5
Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.59 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
GHSA-7wj2-48c4-2684
Apache Tomcat Denial of Service vulnerability in the Catalina package
GHSA-7w75-32cg-r6g2
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests
GHSA-7g59-hm8v-cwmc
Apache Tomcat information disclosure vulnerability
GHSA-79m3-w93m-vjpg
** DISPUTED ** Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor has stated "The tomcat log directory does not contain any sensitive information."
GHSA-7895-gffq-w6jq
Apache Tomcat has a Missing Critical Step in Authentication vulnerability
GHSA-76vr-72mv-mf3q
Cross-Site Request Forgery in Apache Tomcat
GHSA-73rx-3f9r-x949
Insufficient Verification of Data Authenticity in Apache Tomcat
GHSA-72m4-92vp-gxfj
The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory.
GHSA-6vx3-hr43-cfrh
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
GHSA-6v52-mj5r-7j2m
Apache Tomcat Race Condition vulnerability
GHSA-6qr6-x7jm-x2q6
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
GHSA-6m48-jxwx-76q7
Improper Authentication in Apache Tomcat
GHSA-6j8f-66vh-39mj
Apache Tomcat Mishandles Character Sequence in Cookies
GHSA-6j88-6whg-x687
Cross-site Scripting in Apache Tomcat
GHSA-6gjj-c5mj-4cvp
Improper Input Validation in Apache Tomcat
GHSA-6cr4-7c7p-p3xv
Use of Hard-coded Cryptographic Key in Apache Tomcat
GHSA-69cc-cv78-qc8g
Apache Tomcat: Configured cipher preference order not preserved
GHSA-698c-2x4j-g9gq
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
GHSA-68g5-8q7f-m384
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-82jr-6mfr-9vq5 Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.59 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
| GHSA-7wj2-48c4-2684 Apache Tomcat Denial of Service vulnerability in the Catalina package | 35% Средний | больше 4 лет назад | |
| GHSA-7w75-32cg-r6g2 Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests | CVSS3: 7.5 | 23% Средний | больше 2 лет назад |
| GHSA-7g59-hm8v-cwmc Apache Tomcat information disclosure vulnerability | 4% Низкий | больше 4 лет назад | |
| GHSA-79m3-w93m-vjpg ** DISPUTED ** Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor has stated "The tomcat log directory does not contain any sensitive information." | 1% Низкий | больше 4 лет назад | |
| GHSA-7895-gffq-w6jq Apache Tomcat has a Missing Critical Step in Authentication vulnerability | CVSS3: 7.3 | 3% Низкий | 4 месяца назад |
| GHSA-76vr-72mv-mf3q Cross-Site Request Forgery in Apache Tomcat | 9% Низкий | больше 4 лет назад | |
| GHSA-73rx-3f9r-x949 Insufficient Verification of Data Authenticity in Apache Tomcat | CVSS3: 4.3 | 8% Низкий | больше 4 лет назад |
| GHSA-72m4-92vp-gxfj The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory. | 10% Средний | больше 4 лет назад | |
| GHSA-6vx3-hr43-cfrh Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat | CVSS3: 4.3 | 6% Низкий | больше 4 лет назад |
| GHSA-6v52-mj5r-7j2m Apache Tomcat Race Condition vulnerability | CVSS3: 5.9 | 11% Средний | около 8 лет назад |
| GHSA-6qr6-x7jm-x2q6 Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat | CVSS3: 4.3 | 13% Средний | больше 4 лет назад |
| GHSA-6m48-jxwx-76q7 Improper Authentication in Apache Tomcat | 10% Средний | больше 4 лет назад | |
| GHSA-6j8f-66vh-39mj Apache Tomcat Mishandles Character Sequence in Cookies | 17% Средний | больше 4 лет назад | |
| GHSA-6j88-6whg-x687 Cross-site Scripting in Apache Tomcat | CVSS3: 6.1 | 7% Низкий | больше 4 лет назад |
| GHSA-6gjj-c5mj-4cvp Improper Input Validation in Apache Tomcat | 10% Низкий | больше 4 лет назад | |
| GHSA-6cr4-7c7p-p3xv Use of Hard-coded Cryptographic Key in Apache Tomcat | 6% Низкий | больше 4 лет назад | |
| GHSA-69cc-cv78-qc8g Apache Tomcat: Configured cipher preference order not preserved | CVSS3: 7.5 | 0% Низкий | 7 месяцев назад |
| GHSA-698c-2x4j-g9gq Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat | CVSS3: 7.5 | 7% Низкий | больше 4 лет назад |
| GHSA-68g5-8q7f-m384 Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat | CVSS3: 7.5 | 10% Средний | больше 4 лет назад |
Уязвимостей на страницу