7592 matches found
Apache Tomcat 6.0.x < 6.0.30 Multiple Vulnerabilities
Binary data 800609.prm...
Apache Tomcat 5.5.x < 5.5.30 Multiple Vulnerabilities
Binary data 5786.pasl...
Apache Tomcat 5.5.x < 5.5.32 Cross-site Scripting Vulnerability
Binary data 800600.prm...
Apache Tomcat 5.5.x < 5.5.30 Multiple Vulnerabilities
Binary data 800613.prm...
Apache Tomcat 6.0.x < 6.0.32 Denial of Service Vulnerability
Binary data 800599.prm...
Apache Tomcat 6.0.x < 6.0.30 Multiple Vulnerabilities
Binary data 5789.pasl...
Apache Tomcat 6.0.x < 6.0.28 Multiple Vulnerabilities
Binary data 800595.prm...
Apache Tomcat 7.0.0 < 7.0.4
The version of Tomcat installed on the remote host is prior to 7.0.4. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat7.0.4security-7 advisory. - Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the...
Apache Tomcat 6.0.x < 6.0.32 NIO Connector DoS
Binary data 5790.pasl...
Apache Tomcat 5.5.x < 5.5.32 HTML Manager Interface XSS
Binary data 5787.pasl...
Apache Tomcat 6.0.x < 6.0.28 Multiple Vulnerabilities
Binary data 5788.pasl...
Apache Tomcat 5.5.x < 5.5.32 HTML Manager Interface XSS
According to its self-reported version number, the instance of Apache Tomcat 5.5.x listening on the remote host is prior to 5.5.32. It is, therefore, affected by a cross-site scripting vulnerability in its HTML Manager interface. An input validation error exists in the HTML Manager interface of...
Important: Red Hat Security Advisory: jbossweb security update
A patch for JBoss Enterprise Application Platform 4.2.0.CP09, 4.3.0.CP09, and 5.1 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CV...
Important: Red Hat Security Advisory: jbossweb security update
Updated jbossweb packages that fix one security issue are now available for JBoss Enterprise Web Platform 5 for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score,...
Important: Red Hat Security Advisory: jbossweb security update
Updated jbossweb packages that fix one security issue are now available for JBoss Enterprise Application Platform 4.2, 4.3, and 5.1, for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring...
CVE-2011-0534
Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service OutOfMemoryError via a crafted request...
CVE-2010-3718
Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attac...
Directory traversal
Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attac...
Design/Logic Flaw
Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service OutOfMemoryError via a crafted request...
CVE-2011-0534
CVE-2011-0534 affects Apache Tomcat 7.0.0–7.0.6 and 6.0.0–6.0.30. The issue arises because maxHttpHeaderSize is not enforced for NIO HTTP connector requests, enabling remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request. Affected products are Tomcat 7/6 family as...