tomcat5 vulnerabilities (Red Hat)

100 vulnerabilities.

• tomcat5 Red Hat The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of... CVE-2013-1976 Fix available 6.9 MediumJuly 9, 2013
• tomcat5 Red Hat Authentication Bypass in Apache Tomcat CVE-2012-3546 Fix available EPSS 12.0% 4.3 MediumDecember 19, 2012
• tomcat5 Red Hat The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node... CVE-2012-4557 Fix available EPSS 17.5% 5.0 MediumNovember 30, 2012
• tomcat5 Red Hat Improper Authentication in Apache Tomcat CVE-2012-5887 Fix available EPSS 12.1% 5.0 MediumNovember 17, 2012
• tomcat5 Red Hat Improper Authentication in Apache Tomcat CVE-2012-5886 Fix available 5.0 MediumNovember 17, 2012
• tomcat5 Red Hat Improper Access Control in Apache Tomcat CVE-2012-5885 Fix available 5.0 MediumNovember 17, 2012
• tomcat5 Red Hat Denial of Service in Apache Tomcat CVE-2012-0022 Fix available EPSS 10.5% 5.0 MediumJanuary 19, 2012
• tomcat5 Red Hat Use of Hard-coded Cryptographic Key in Apache Tomcat CVE-2011-5064 Fix available 4.3 MediumJanuary 14, 2012
• tomcat5 Red Hat Improper Authentication in Apache Tomcat CVE-2011-5063 Fix available 4.3 MediumJanuary 14, 2012
• tomcat5 Red Hat Improper Authentication in Apache Tomcat CVE-2011-5062 Fix available 5.0 MediumJanuary 14, 2012
• tomcat5 Red Hat Authentication Bypass in Apache Tomcat CVE-2011-1184 Fix available 5.0 MediumJanuary 14, 2012
• tomcat5 Red Hat Improper Input Validation in Apache Tomcat CVE-2011-4858 Public exploitFix available EPSS 79.7% 5.0 MediumJanuary 5, 2012
• tomcat5 Red Hat Apache Tomcat Allows Remote Attackers to Spoof AJP Requests CVE-2011-3190 Fix available EPSS 15.2% 7.5 HighAugust 31, 2011
• tomcat5 Red Hat Improper Input Validation in Apache Tomcat CVE-2011-2526 Fix available 4.4 MediumJuly 14, 2011
• tomcat5 Red Hat Insertion of Sensitive Information into Log File in Apache Tomcat CVE-2011-2204 Fix available 1.9 LowJune 29, 2011
• tomcat5 Red Hat Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache... CVE-2011-0419 Public exploitFix available EPSS 30.4% 4.3 MediumMay 15, 2011
• tomcat5 Red Hat Improper Neutralization of Input During Web Page Generation in Apache Tomcat CVE-2011-0013 Fix available EPSS 10.0% 4.3 MediumFebruary 13, 2011
• tomcat5 Red Hat Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment CVE-2010-4476 Public exploitFix available EPSS 23.5% 5.0 MediumFebruary 13, 2011
• tomcat5 Red Hat Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat CVE-2010-3718 Fix available 1.2 LowFebruary 10, 2011
• tomcat5 Red Hat Improper Neutralization of Input During Web Page Generation in Apache Tomcat CVE-2010-4172 Public exploitFix available EPSS 42.0% 4.3 MediumNovember 26, 2010
• tomcat5 Red Hat Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache... CVE-2010-1623 Fix available EPSS 20.3% 5.0 MediumOctober 4, 2010
• tomcat5 Red Hat Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the... CVE-2009-2696 4.3 MediumAugust 5, 2010
• tomcat5 Red Hat The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow... CVE-2010-1452 Fix available EPSS 21.4% 5.0 MediumJuly 28, 2010
• tomcat5 Red Hat Apache Tomcat does not properly handle an invalid Transfer-Encoding header CVE-2010-2227 Fix available EPSS 54.8% 6.4 MediumJuly 13, 2010
• tomcat5 Red Hat The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD)... CVE-2009-4901 2.1 LowJune 18, 2010
• tomcat5 Red Hat Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC... CVE-2010-0407 Fix available 6.8 MediumJune 10, 2010
• tomcat5 Red Hat Apache MyFaces Cross-site Scripting vulnerability CVE-2010-2086 4.0 MediumMay 27, 2010
• tomcat5 Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2010-1157 Public exploitFix available EPSS 52.5% 2.6 LowApril 23, 2010
• tomcat5 Red Hat The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15,... CVE-2010-0434 Fix available EPSS 18.4% 4.3 MediumMarch 5, 2010
• tomcat5 Red Hat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat CVE-2009-2902 Fix available EPSS 10.7% 4.3 MediumJanuary 28, 2010
• tomcat5 Red Hat Apache Tomcat Directory Traversal vulnerability CVE-2009-2693 Fix available 5.8 MediumJanuary 28, 2010
• tomcat5 Red Hat Apache Tomcat affected by vulnerability in TLS and SSL protocol CVE-2009-3555 Public exploitFix available EPSS 87.3% 5.8 MediumNovember 9, 2009
• tomcat5 Red Hat The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended... CVE-2009-3095 Fix available EPSS 13.5% 5.0 MediumSeptember 8, 2009
• tomcat5 Red Hat The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the... CVE-2009-3094 Fix available 2.6 LowSeptember 8, 2009
• tomcat5 Red Hat Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable... CVE-2009-2412 Fix available EPSS 13.8% 10.0 HighAugust 6, 2009
• tomcat5 Red Hat The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion... CVE-2009-1891 Fix available EPSS 17.1% 7.1 HighJuly 10, 2009
• tomcat5 Red Hat Directory Traversal in Apache Tomcat CVE-2008-5515 Fix available EPSS 18.7% 5.0 MediumJune 16, 2009
• tomcat5 Red Hat Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big... CVE-2009-1956 Fix available EPSS 12.0% 6.4 MediumJune 6, 2009
• tomcat5 Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2009-0783 Fix available 4.2 MediumJune 5, 2009
• tomcat5 Red Hat Exposure of Sensitive Information in Apache Tomcat CVE-2009-0580 Public exploitFix available EPSS 94.4% 4.3 MediumJune 5, 2009
• tomcat5 Red Hat Apache Tomcat Denial of Service via Malformed Request Headers CVE-2009-0033 EPSS 10.1% 5.0 MediumJune 5, 2009
• tomcat5 Red Hat The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7,... CVE-2009-1955 Public exploitFix available EPSS 53.0% 7.5 HighJune 4, 2009
• tomcat5 Red Hat The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5... CVE-2009-0023 Fix available 4.3 MediumJune 4, 2009
• tomcat5 Red Hat Cross-site scripting in Apache Tomcat CVE-2009-0781 Fix available 4.3 MediumMarch 9, 2009
• tomcat5 Red Hat Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address... CVE-2008-3271 4.3 MediumOctober 13, 2008
• tomcat5 Red Hat manzier.pxt in Red Hat Network Satellite Server before 5.1.1 has a hard-coded authentication key,... CVE-2008-2369 9.1 CriticalAugust 14, 2008
• tomcat5 Red Hat Apache Tomcat Directory Traversal vulnerability CVE-2008-2938 Public exploitFix available EPSS 99.7% 4.3 MediumAugust 13, 2008
• tomcat5 Red Hat Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0... CVE-2008-2939 Fix available EPSS 39.0% 4.3 MediumAugust 6, 2008
• tomcat5 Red Hat Apache Tomcat Path Traversal Vulnerability CVE-2008-2370 Public exploitFix available EPSS 52.7% 5.0 MediumAugust 4, 2008
• tomcat5 Red Hat Apache Tomcat Cross-site scripting (XSS) vulnerability CVE-2008-1232 Public exploitFix available EPSS 75.9% 4.3 MediumAugust 4, 2008
• Show olderLoading…