Important Photon OS Security Update - PHSA-2019-0227

Updates of 'polkit', 'apache-tomcat', 'libarchive' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2019-0011

Updates of 'wpasupplicant', 'apache-tomcat', 'gnutls' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2019-3.0-0011

Updates of 'gnutls', 'apache-tomcat', 'wpasupplicant' packages of Photon OS have been released...

Apache Tomcat 8.0.x < 8.0.47 / 8.5.x < 8.5.23 RCE

Binary data 700610.pasl...

Moderate severity vulnerability that affects org.apache.tomcat.embed:tomcat-embed-core

Withdrawn: Duplicate of GHSA-qcxh-w3j9-58qr...

GHSA-8VMX-QMCH-MPQG Apache Tomcat OS Command Injection vulnerability

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by...

Apache Tomcat OS Command Injection vulnerability

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by...

Apache Tomcat 7.0.0 < 7.0.94 Remote Code Execution on Windows

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 or 7.0.0 to 7.0.93. It is, therefore, affected by a remote code execution vulnerability when running on Windows with enableCmdLineArguments enabled due to a bug in the way the JRE passes command line...

Amazon Linux 2 : tomcat (ALAS-2019-1192)

When the default servlet in Apache Tomcat returned a redirect to a directory e.g. redirecting to '/foo/' when the user requested '/foo' a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.CVE-2018-11784 C Tenable Network Security, Inc. Th...

Apache Tomcat 9.0.0.M1 < 9.0.19 Remote Code Execution on Windows

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 or 7.0.0 to 7.0.93. It is, therefore, affected by a remote code execution vulnerability when running on Windows with enableCmdLineArguments enabled due to a bug in the way the JRE passes command line...

Apache Tomcat 9.0.0.M1 < 9.0.16 Denial of Service

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.14 or 8.5.0 to 8.5.37. It is, therefore, affected by a denial of service vulnerability due to streams kept open for requests that utilised the Servlet API's blocking I/O. Note that the scanner has not attempted to exploi...

Apache Tomcat CGI Servlet Remote Code Execution (CVE-2019-0232)

A remote code execution vulnerability exists in Apache Tomcat CGI Servlet. Successful exploitation of this vulnerability could lead to remote code execution on the target server...

Apache Tomcat 8.5.0 < 8.5.40 Remote Code Execution on Windows

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 or 7.0.0 to 7.0.93. It is, therefore, affected by a remote code execution vulnerability when running on Windows with enableCmdLineArguments enabled due to a bug in the way the JRE passes command line...

Apache Tomcat 8.5.0 < 8.5.38 Denial of Service

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.14 or 8.5.0 to 8.5.37. It is, therefore, affected by a denial of service vulnerability due to streams kept open for requests that utilised the Servlet API's blocking I/O. Note that the scanner has not attempted to exploi...

Exploit for OS Command Injection in Apache Tomcat

CVE-2019-0232 Apache Tomcat Remote Code Execution on Windows -...

Apache Tomcat RCE Vulnerability (Apr 2019) - Windows

Apache Tomcat is prone to a remote code execution RCE vulnerability due to a bug in the way the JRE passes command line arguments to Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Apache Tomcat DoS Vulnerability (Mar 2019) - Windows

Apache Tomcat is prone to a denial of service vulnerability in the HTTP/2 implementation. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apache Tomcat 8.5.0 < 8.5.40 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 8.5.40. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat8.5.40security-8 advisory. - When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1...

Apache Tomcat 7.0.0 < 7.0.94 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 7.0.94. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat7.0.94security-7 advisory. - When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1...

Apache Tomcat DoS Vulnerability (Mar 2019) - Linux

Apache Tomcat is prone to a denial of service vulnerability in the HTTP/2 implementation. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...