7555 matches found
Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.5 release and security update
Red Hat JBoss Web Server 5.8.5 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Windows Server. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVS...
tomcat: Apache Tomcat denial of service
A denial of service flaw was found in Apache Tomcat. For some unlikely configurations of multipart upload, an integer overflow vulnerability may lead to a denial of service via bypassing size limits...
tomcat: Apache Tomcat denial of service
A denial of service flaw was found in Apache Tomcat. A race condition during connection closure could trigger a JVM crash when using the APR/Native connector, leading to a denial of service. This issue was particularly noticeable with client-initiated closures of HTTP/2 connections...
tomcat: Apache Tomcat DoS in multipart upload
A denial-of-service DoS vulnerability has been identified in Apache Tomcat, concerning its handling of upload limits. A remote attacker could exploit this flaw by sending a specially crafted request containing an excessively large number of multipart sections. This malicious request can trigger...
Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.5 release and security update
An update is now available for Red Hat JBoss Web Server 5.8 on Red Hat Enterprise Linux versions 7, 8, and 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
tomcat: Apache Tomcat denial of service
A denial of service flaw was found in Apache Tomcat. For some unlikely configurations of multipart upload, an integer overflow vulnerability may lead to a denial of service via bypassing size limits...
tomcat: Apache Tomcat denial of service
A denial of service flaw was found in Apache Tomcat. An uncontrolled resource consumption vulnerability, where an HTTP/2 client fails to acknowledge the initial settings frame that reduces the maximum permitted concurrent streams, could result in a denial of service...
tomcat: Apache Tomcat DoS in multipart upload
A denial-of-service DoS vulnerability has been identified in Apache Tomcat, concerning its handling of upload limits. A remote attacker could exploit this flaw by sending a specially crafted request containing an excessively large number of multipart sections. This malicious request can trigger...
tomcat: Apache Tomcat denial of service
A denial of service flaw was found in Apache Tomcat. A race condition during connection closure could trigger a JVM crash when using the APR/Native connector, leading to a denial of service. This issue was particularly noticeable with client-initiated closures of HTTP/2 connections...
RHEL 7 / 8 / 9 : Red Hat JBoss Web Server 5.8.5 (RHSA-2025:11695)
The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11695 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised o...
The vulnerability of the Apache Tomcat application server, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of the Apache Tomcat application server is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Apache Tomcat application server, related to synchronization errors when using a shared resource (“Race Condition”), allows attackers to cause service failures.
The vulnerability of the Apache Tomcat application server is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Apache Tomcat application server, related to integer overflows, allows attackers to cause service failures.
The vulnerability of the Apache Tomcat application server is related to integer overflows. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.7)
The version of AOS installed on the remote host is prior to 6.10.1.7. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.1.7 advisory. - Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or maliciou...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.8.1.9)
The version of AOS installed on the remote host is prior to 6.8.1.9. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.8.1.9 advisory. - Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious...
Important Photon OS Security Update - PHSA-2025-5.0-91-0565
Updates of 'apache-tomcat10', 'apache-tomcat9' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2025-4.0-0835
Updates of 'apache-tomcat9' packages of Photon OS have been released...
Apache Tomcat Competitive Conditions Issue Vulnerability
Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server . Used to implement the Servlet and JavaServer Page JSP support. Apache Tomcat suffers from a Competitive Conditions Issue vulnerability, which can be exploited by an attacker to cause a denial of...
Apache Tomcat Resource Management Error Vulnerability (CNVD-2025-16618)
Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server . Used to implement the Servlet and JavaServer Page JSP support. Apache Tomcat has a Resource Management Error vulnerability that originates from an HTTP/2 client not acknowledging the initial setu...
Apache Tomcat 11.0.0-M1 < 11.0.9 Multiple Vulnerabilities
The version of Apache Tomcat installed on the remote host is 9.0.0-M1 prior to 9.0.107, 10.1.0-M1 prior to 10.1.43 or 11.0.0-M1 prior to 11.0.9. It is, therefore, affected by multiple vulnerabilities : - A race condition on connection close could trigger a JVM crash when using the APR/Native...