tomcat vulnerabilities (openSUSE)
138 vulnerabilities.
tomcatopenSUSEIncomplete fix for CVE-2020-94847.0 HightomcatopenSUSEApache Tomcat h2c request mix-up7.5 HightomcatopenSUSEApache Tomcat information disclosure5.9 MediumtomcatopenSUSEApache Tomcat: Request header mix-up between HTTP/2 streams7.5 HightomcatopenSUSEExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat4.3 MediumtomcatopenSUSEInfinite Loop in Apache Tomcat7.5 HightomcatopenSUSEImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat7.5 HightomcatopenSUSEUncontrolled Resource Consumption in Apache Tomcat7.5 HightomcatopenSUSEUser-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviliges7.7 HightomcatopenSUSEPotential remote code execution in Apache Tomcat7.0 HightomcatopenSUSEImproper Privilege Management in Tomcat9.8 CriticaltomcatopenSUSEPotential HTTP request smuggling in Apache Tomcat4.8 MediumtomcatopenSUSEPotential HTTP request smuggling in Apache Tomcat4.8 MediumtomcatopenSUSEInsufficiently Protected Credentials in Apache Tomcat7.0 HightomcatopenSUSEIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack7.5 HightomcatopenSUSEImproper Locking in Apache Tomcat7.5 HightomcatopenSUSECross-site scripting in Apache Tomcat6.1 MediumtomcatopenSUSEApache Tomcat Denial of Service vulnerability7.5 HightomcatopenSUSEApache Tomcat Open Redirect vulnerability4.3 MediumtomcatopenSUSEApache Tomcat Race Condition vulnerability5.9 MediumtomcatopenSUSEThe host name verification missing in Apache Tomcat7.5 HightomcatopenSUSEIn Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder7.5 HightomcatopenSUSEThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins9.8 CriticaltomcatopenSUSEUnrestricted Upload of File with Dangerous Type Apache Tomcat8.1 HightomcatopenSUSEImproper Handling of Exceptional Conditions in Apache Tomcat7.5 HightomcatopenSUSEExposure of Resource to Wrong Sphere in Apache Tomcat9.1 CriticaltomcatopenSUSEExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 HightomcatopenSUSEConcurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat7.5 HightomcatopenSUSEHigh severity vulnerability that affects commons-fileupload:commons-fileupload7.5 HightomcatopenSUSEImproper Verification of Source of a Communication Channel in Apache Tomcat6.3 MediumtomcatopenSUSEImproper Access Control in Apache Tomcat8.8 HightomcatopenSUSEExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat4.3 MediumtomcatopenSUSEApache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token8.8 HightomcatopenSUSEImproper Neutralization of Input During Web Page Generation in Apache Tomcat8.1 HightomcatopenSUSEImproper Limitation of a Pathname to a Restricted Directory in Apache Tomcat5.3 MediumtomcatopenSUSEImproper Limitation of a Pathname to a Restricted Directory in Apache Tomcat4.3 MediumtomcatopenSUSECommons FileUpload Denial of service vulnerability7.5 HightomcatopenSUSEThe (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of...6.9 Medium