jws5-tomcat-native vulnerabilities (Red Hat)
54 vulnerabilities.
-
jws5-tomcat-nativeRed Hat Apache Tomcat: HTTP/2 header handling DoS 7.5 High -
jws5-tomcat-nativeRed Hat Apache Tomcat: HTTP request smuggling via malformed trailer headers 7.5 High -
jws5-tomcat-nativeRed Hat Excessive time spent in DH check / generation with large Q parameter value 5.3 Medium -
jws5-tomcat-nativeRed Hat Apache Tomcat: Open redirect with FORM authentication 6.1 Medium -
jws5-tomcat-nativeRed Hat Excessive time spent checking DH q parameter value 5.3 Medium -
jws5-tomcat-nativeRed Hat Excessive time spent checking DH keys and parameters 5.3 Medium -
jws5-tomcat-nativeRed Hat Possible DoS translating ASN.1 object identifiers 6.5 Medium -
jws5-tomcat-nativeRed Hat Apache Tomcat: Fix for CVE-2023-24998 is incomplete 7.5 High -
jws5-tomcat-nativeRed Hat Certificate policy check not enabled 5.3 Medium -
jws5-tomcat-nativeRed Hat Invalid certificate policies in leaf certificates are silently ignored 5.3 Medium -
jws5-tomcat-nativeRed Hat Excessive Resource Usage Verifying X.509 Policy Constraints 7.5 High -
jws5-tomcat-nativeRed Hat Apache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations 4.3 Medium -
jws5-tomcat-nativeRed Hat Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts 7.5 High -
jws5-tomcat-nativeRed Hat X.400 address type confusion in X.509 GeneralName 7.4 High -
jws5-tomcat-nativeRed Hat Use-after-free following BIO_new_NDEF 7.5 High -
jws5-tomcat-nativeRed Hat Double free after calling PEM_read_bio_ex 7.5 High -
jws5-tomcat-nativeRed Hat Timing Oracle in RSA Decryption 5.9 Medium -
jws5-tomcat-nativeRed Hat Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions 9.8 Critical -
jws5-tomcat-nativeRed Hat Apache Tomcat: Information disclosure 3.7 Low -
jws5-tomcat-nativeRed Hat The c_rehash script allows command injection 7.3 High -
jws5-tomcat-nativeRed Hat The c_rehash script allows command injection 7.3 High -
jws5-tomcat-nativeRed Hat Infinite loop in BN_mod_sqrt() reachable when parsing certificates 7.5 High -
jws5-tomcat-nativeRed Hat Local privilege escalation with FileStore 7.0 High -
jws5-tomcat-nativeRed Hat DoS via memory leak with WebSocket connections 7.5 High -
jws5-tomcat-nativeRed Hat Read buffer overruns processing ASN.1 strings 7.4 High -
jws5-tomcat-nativeRed Hat Incorrect Transfer-Encoding handling with HTTP/1.0 5.3 Medium -
jws5-tomcat-nativeRed Hat Auth weakness in JNDIRealm 6.5 Medium -
jws5-tomcat-nativeRed Hat CA certificate check bypass with X509_V_FLAG_X509_STRICT 7.4 High -
jws5-tomcat-nativeRed Hat NULL pointer deref in signature_algorithms processing 5.9 Medium -
jws5-tomcat-nativeRed Hat Incomplete fix for CVE-2020-9484 7.0 High -
jws5-tomcat-nativeRed Hat Apache Tomcat h2c request mix-up 7.5 High -
jws5-tomcat-nativeRed Hat Null pointer deref in X509_issuer_and_serial_hash() 5.9 Medium -
jws5-tomcat-nativeRed Hat Integer overflow in CipherUpdate 7.5 High -
jws5-tomcat-nativeRed Hat Apache Tomcat information disclosure 5.9 Medium -
jws5-tomcat-nativeRed Hat EDIPARTYNAME NULL pointer dereference 5.9 Medium -
jws5-tomcat-nativeRed Hat Apache Tomcat: Request header mix-up between HTTP/2 streams 7.5 High -
jws5-tomcat-nativeRed Hat SQL injection in hibernate-core 7.4 High -
jws5-tomcat-nativeRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 4.3 Medium -
jws5-tomcat-nativeRed Hat Uncontrolled Resource Consumption in Apache Tomcat 7.5 High -
jws5-tomcat-nativeRed Hat Potential remote code execution in Apache Tomcat 7.0 High -
jws5-tomcat-nativeRed Hat Improper Privilege Management in Tomcat 9.8 Critical -
jws5-tomcat-nativeRed Hat Potential HTTP request smuggling in Apache Tomcat 4.8 Medium -
jws5-tomcat-nativeRed Hat Potential HTTP request smuggling in Apache Tomcat 4.8 Medium -
jws5-tomcat-nativeRed Hat Insufficiently Protected Credentials in Apache Tomcat 7.0 High -
jws5-tomcat-nativeRed Hat In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack 7.5 High -
jws5-tomcat-nativeRed Hat Improper Locking in Apache Tomcat 7.5 High -
jws5-tomcat-nativeRed Hat Cross-site scripting in Apache Tomcat 6.1 Medium -
jws5-tomcat-nativeRed Hat Apache Tomcat OS Command Injection vulnerability 8.1 High -
jws5-tomcat-nativeRed Hat Apache Tomcat Denial of Service vulnerability 7.5 High -
jws5-tomcat-nativeRed Hat 0-byte record padding oracle 5.9 Medium - Show olderLoading…