tomcat8 vulnerabilities (Debian)
53 vulnerabilities.
-
tomcat8Debian Apache Tomcat DoS with unexpected TLS packet 7.5 High -
tomcat8Debian Incorrect Transfer-Encoding handling with HTTP/1.0 5.3 Medium -
tomcat8Debian Auth weakness in JNDIRealm 6.5 Medium -
tomcat8Debian Incomplete fix for CVE-2020-9484 7.0 High -
tomcat8Debian Apache Tomcat h2c request mix-up 7.5 High -
tomcat8Debian Apache Tomcat information disclosure 5.9 Medium -
tomcat8Debian Apache Tomcat: Request header mix-up between HTTP/2 streams 7.5 High -
tomcat8Debian Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 4.3 Medium -
tomcat8Debian Infinite Loop in Apache Tomcat 7.5 High -
tomcat8Debian Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat 7.5 High -
tomcat8Debian Uncontrolled Resource Consumption in Apache Tomcat 7.5 High -
tomcat8Debian Potential remote code execution in Apache Tomcat 7.0 High -
tomcat8Debian Improper Privilege Management in Tomcat 9.8 Critical -
tomcat8Debian Potential HTTP request smuggling in Apache Tomcat 4.8 Medium -
tomcat8Debian Potential HTTP request smuggling in Apache Tomcat 4.8 Medium -
tomcat8Debian Insufficiently Protected Credentials in Apache Tomcat 7.0 High -
tomcat8Debian In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack 7.5 High -
tomcat8Debian Cross-site scripting in Apache Tomcat 6.1 Medium -
tomcat8Debian Apache Tomcat Denial of Service vulnerability 7.5 High -
tomcat8Debian Apache Tomcat Open Redirect vulnerability 4.3 Medium -
tomcat8Debian Apache Tomcat Race Condition vulnerability 5.9 Medium -
tomcat8Debian The host name verification missing in Apache Tomcat 7.5 High -
tomcat8Debian In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder 7.5 High -
tomcat8Debian The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins 9.8 Critical -
tomcat8Debian Apache Tomcat unauthorized access vulnerability 5.9 Medium -
tomcat8Debian Apache Tomcat information exposure vulnerability 6.5 Medium -
tomcat8Debian Insufficient Verification of Data Authenticity in Apache Tomcat 4.3 Medium -
tomcat8Debian Improper Handling of Exceptional Conditions in Apache Tomcat 7.5 High -
tomcat8Debian Exposure of Resource to Wrong Sphere in Apache Tomcat 9.1 Critical -
tomcat8Debian Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 7.5 High -
tomcat8Debian tomcat8 - regression update No score -
tomcat8Debian It was discovered that a programming error in the processing of HTTPS requests in the Apache... 7.5 High -
tomcat8Debian Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat 7.5 High -
tomcat8Debian The postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6... 7.8 High -
tomcat8Debian The postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0... 7.8 High -
tomcat8Debian Apache Tomcat Improper Access Control vulnerability 9.8 Critical -
tomcat8Debian Improper Input Validation in Apache Tomcat 7.1 High -
tomcat8Debian Incorrect Authorization in Apache Tomcat 7.5 High -
tomcat8Debian Apache Tomcat vulnerable to SecurityManager bypass 7.5 High -
tomcat8Debian System Property Disclosure in Apache Tomcat 5.3 Medium -
tomcat8Debian Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat 9.1 Critical -
tomcat8Debian Observable Discrepancy in Apache Tomcat 5.9 Medium -
tomcat8Debian The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8... 7.8 High -
tomcat8Debian Improper Access Control in Apache Tomcat 8.1 High -
tomcat8Debian High severity vulnerability that affects commons-fileupload:commons-fileupload 7.5 High -
tomcat8Debian Improper Verification of Source of a Communication Channel in Apache Tomcat 6.3 Medium -
tomcat8Debian Improper Access Control in Apache Tomcat 8.8 High -
tomcat8Debian Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 4.3 Medium -
tomcat8Debian Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token 8.8 High -
tomcat8Debian Improper Neutralization of Input During Web Page Generation in Apache Tomcat 8.1 High - Show olderLoading…