tomcat-native-debuginfo vulnerabilities (Red Hat)
97 vulnerabilities.
tomcat-native-debuginfoRed HatInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...7.5 Hightomcat-native-debuginfoRed HatCross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2...4.3 Mediumtomcat-native-debuginfoRed HatThe (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not...6.0 Mediumtomcat-native-debuginfoRed HatThe Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an...6.0 Mediumtomcat-native-debuginfoRed HatThe chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not...5.0 Mediumtomcat-native-debuginfoRed HatApache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous...5.0 Mediumtomcat-native-debuginfoRed HatThe default configuration for the Command Line Interface in Red Hat Enterprise Application...2.1 Lowtomcat-native-debuginfoRed HatImproper Access Control in Apache WSS4J5.0 Mediumtomcat-native-debuginfoRed HatThe isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used...4.9 Mediumtomcat-native-debuginfoRed HatThe EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise...5.5 Mediumtomcat-native-debuginfoRed HatThe mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,...5.0 Mediumtomcat-native-debuginfoRed HatRace condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote...6.8 Mediumtomcat-native-debuginfoRed HatThe deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP...4.3 Mediumtomcat-native-debuginfoRed HatMissing XML Validation in Apache Tomcat4.3 Mediumtomcat-native-debuginfoRed HatNetty denial of service vulnerability5.0 Mediumtomcat-native-debuginfoRed HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat4.3 Mediumtomcat-native-debuginfoRed HatRed Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0...3.7 Lowtomcat-native-debuginfoRed HatThe org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and...4.3 Mediumtomcat-native-debuginfoRed HatInadequate Encryption Strength in Apache CXF6.4 Mediumtomcat-native-debuginfoRed HatImproper Input Validation in Apache Tomcat6.4 Mediumtomcat-native-debuginfoRed HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat2.6 Lowtomcat-native-debuginfoRed HatImproper Authentication in Apache Tomcat6.8 Mediumtomcat-native-debuginfoRed HatMultiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the...4.3 Mediumtomcat-native-debuginfoRed HatMultiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24...4.3 Mediumtomcat-native-debuginfoRed HatJboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass5.3 Mediumtomcat-native-debuginfoRed HatJboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorization6.5 Mediumtomcat-native-debuginfoRed HatImproper Authentication in Apache CXF4.3 Mediumtomcat-native-debuginfoRed HatXML Signature/Encryption Not Validated in Apache CXF10.0 Hightomcat-native-debuginfoRed HatApache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions5.0 Mediumtomcat-native-debuginfoRed HatUser confusion in IronJacamar4.3 Mediumtomcat-native-debuginfoRed HatThe mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node...5.0 Mediumtomcat-native-debuginfoRed HatRemote web-service operation execution in Apache CXF4.3 Mediumtomcat-native-debuginfoRed HatMultiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in...2.6 Lowtomcat-native-debuginfoRed HatOracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup,...2.1 Lowtomcat-native-debuginfoRed Hatjboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss...6.8 Mediumtomcat-native-debuginfoRed HatStack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache...4.3 Mediumtomcat-native-debuginfoRed HatImproper Neutralization of Input During Web Page Generation in Apache Tomcat4.3 Mediumtomcat-native-debuginfoRed HatImproper Limitation of a Pathname to a Restricted Directory in Apache Tomcat1.2 Lowtomcat-native-debuginfoRed HatImproper Neutralization of Input During Web Page Generation in Apache Tomcat4.3 Mediumtomcat-native-debuginfoRed HatMemory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache...5.0 Mediumtomcat-native-debuginfoRed HatThe (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow...5.0 Mediumtomcat-native-debuginfoRed HatApache MyFaces Cross-site Scripting vulnerability4.0 Mediumtomcat-native-debuginfoRed HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat2.6 Lowtomcat-native-debuginfoRed HatImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat4.3 Mediumtomcat-native-debuginfoRed HatApache Tomcat Directory Traversal vulnerability5.8 Mediumtomcat-native-debuginfoRed HatApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 Mediumtomcat-native-debuginfoRed HatCross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server...4.3 Medium