Поиск уязвимостей
Количество 1 544
Количество 1 544
GHSA-q4hg-rmq2-52q9
Improper Locking in Apache Tomcat
GHSA-q3mw-pvr8-9ggc
Apache Tomcat Open Redirect vulnerability
GHSA-pxwv-88pv-hh3j
org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.
GHSA-pvjh-7h8q-q56r
Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header
GHSA-prc3-7f44-w48j
Missing XML Validation in Apache Tomcat
GHSA-ppj6-9ppm-3h56
The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).
GHSA-pm78-wxxf-fw98
Cross-site scripting in Apache Tomcat
GHSA-pg42-rg8c-j886
Apache Tomcat has a Cross-site Scripting vulnerability
GHSA-p57v-p3fx-qgwm
Apache Tomcat XSS Vulnerability
GHSA-p543-jg43-9pm5
Apache Tomcat may be started without proper security settings
GHSA-p26v-97vp-jcx6
Access controll bypass in Apache Tomcat
GHSA-p263-rh6r-g7jw
Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this issue is already covered by other CVE identifiers.
GHSA-p22x-g9px-3945
Apache Tomcat may reject request containing invalid Content-Length header
GHSA-mxxf-x9fw-f2hv
Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp. NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries.
GHSA-mv42-px54-87jw
Improper Access Control in Apache Tomcat
GHSA-mqg3-r7h5-24x4
Apache Tomcat has an Always-Incorrect Control Flow Implementation vulnerability
GHSA-mppv-79ch-vw6q
Apache Tomcat vulnerable to information leak
GHSA-mg4v-rf8p-ghqq
Apache Tomcat allows remote attackers to bypass intended access restrictions
GHSA-m8w6-7rh6-4xj6
Apache Tomcat Leaks Information via Error Message
GHSA-m8h8-6rvg-f4mg
Apache Tomcat Path Traversal Vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-q4hg-rmq2-52q9 Improper Locking in Apache Tomcat | CVSS3: 7.5 | 73% Высокий | больше 7 лет назад |
| GHSA-q3mw-pvr8-9ggc Apache Tomcat Open Redirect vulnerability | CVSS3: 6.1 | 6% Низкий | около 3 лет назад |
| GHSA-pxwv-88pv-hh3j org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response. | 7% Низкий | больше 4 лет назад | |
| GHSA-pvjh-7h8q-q56r Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header | 2% Низкий | больше 4 лет назад | |
| GHSA-prc3-7f44-w48j Missing XML Validation in Apache Tomcat | 8% Низкий | больше 4 лет назад | |
| GHSA-ppj6-9ppm-3h56 The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null). | 27% Средний | больше 4 лет назад | |
| GHSA-pm78-wxxf-fw98 Cross-site scripting in Apache Tomcat | 72% Высокий | больше 4 лет назад | |
| GHSA-pg42-rg8c-j886 Apache Tomcat has a Cross-site Scripting vulnerability | CVSS3: 6.1 | 4% Низкий | 4 месяца назад |
| GHSA-p57v-p3fx-qgwm Apache Tomcat XSS Vulnerability | 5% Низкий | больше 4 лет назад | |
| GHSA-p543-jg43-9pm5 Apache Tomcat may be started without proper security settings | 4% Низкий | больше 4 лет назад | |
| GHSA-p26v-97vp-jcx6 Access controll bypass in Apache Tomcat | 6% Низкий | больше 4 лет назад | |
| GHSA-p263-rh6r-g7jw Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this issue is already covered by other CVE identifiers. | 5% Низкий | больше 4 лет назад | |
| GHSA-p22x-g9px-3945 Apache Tomcat may reject request containing invalid Content-Length header | CVSS3: 7.5 | 2% Низкий | около 4 лет назад |
| GHSA-mxxf-x9fw-f2hv Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp. NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries. | 8% Низкий | больше 4 лет назад | |
| GHSA-mv42-px54-87jw Improper Access Control in Apache Tomcat | CVSS3: 8.8 | 13% Средний | больше 4 лет назад |
| GHSA-mqg3-r7h5-24x4 Apache Tomcat has an Always-Incorrect Control Flow Implementation vulnerability | CVSS3: 9.1 | 1% Низкий | 4 месяца назад |
| GHSA-mppv-79ch-vw6q Apache Tomcat vulnerable to information leak | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| GHSA-mg4v-rf8p-ghqq Apache Tomcat allows remote attackers to bypass intended access restrictions | 6% Низкий | больше 4 лет назад | |
| GHSA-m8w6-7rh6-4xj6 Apache Tomcat Leaks Information via Error Message | 7% Низкий | больше 4 лет назад | |
| GHSA-m8h8-6rvg-f4mg Apache Tomcat Path Traversal Vulnerability | 53% Средний | больше 4 лет назад |
Уязвимостей на страницу