7682 matches found
Fixed in Apache Tomcat 10.0.5
Important: Denial of Service CVE-2021-30639 An error introduced as part of a change to improve error handling during non-blocking I/O meant that the error flag associated with the Request object was not reset between requests. This meant that once a non-blocking I/O error occurred, all future...
Fixed in Apache Tomcat 8.5.65
Important: Denial of Service CVE-2021-30639 An error introduced as part of a change to improve error handling during non-blocking I/O meant that the error flag associated with the Request object was not reset between requests. This meant that once a non-blocking I/O error occurred, all future...
Fixed in Apache Tomcat 9.0.45
Important: Denial of Service CVE-2021-30639 An error introduced as part of a change to improve error handling during non-blocking I/O meant that the error flag associated with the Request object was not reset between requests. This meant that once a non-blocking I/O error occurred, all future...
KLA12216 DoS vulnerability in Apache Tomcat
A denial of service vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Apache Tomcat 8.5.x vulnerabilities Apache Tomcat 9.x vulnerabilities Apache Tomcat 10.0.x vulnerabilities Related products Apache-Tomcat CV...
The vulnerability of the HTTP/2 server implementation in Apache Tomcat allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the HTTP/2 server implementation in Apache Tomcat is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Critical Photon OS Security Update - PHSA-2021-4.0-0007
Updates of 'python3', 'libvirt', 'curl', 'libtiff', 'linux-aws', 'containerd', 'glib', 'apache-tomcat', 'nodejs', 'docker', 'openssl', 'linux', 'wpasupplicant', 'linux-secure', 'mysql', 'linux-rt' packages of Photon OS have been released...
OPENSUSE-SU-2021:0496-1 Security update for tomcat
This update for tomcat fixes the following issues: CVE-2021-25122: Apache Tomcat h2c request mix-up bsc1182912 CVE-2021-25329: Complete fix for CVE-2020-9484 bsc1182909 This update was imported from the SUSE:SLE-15-SP2:Update update project...
Security update for tomcat (important)
openSUSE Security Update: Security update for tomcat Announcement ID: openSUSE-SU-2021:0496-1 Rating: important References: 1182909 1182912 Cross-References: CVE-2021-25122 CVE-2021-25329 CVSS scores: CVE-2021-25122 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-25122 SUSE: 7.5...
Low: Red Hat Security Advisory: tomcat security update
An update for tomcat is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Security Bulletin: CVE-2021-24122 When serving resources from a network location using the NTFS file system, Apache Tomcat versions 8.5.0 to 8.5.59 were susceptible to JSP source code disclo
Summary When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code disclosure in some configurations. The root cause was the unexpected...
Apache Tomcat mod_jk Buffer Overflow
A buffer overflow vulnerability exists in Apache Tomcat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
cve_manager_VS - A Collection Of Python Apps And Shell Scripts To Email An Xlsx Spreadsheet Of New Vulnerabilities In The NIST CVE Database And Their Associated Products On A Daily Schedule
A collection of python apps and shell scripts to email an xlsx spreadsheet of new vulnerabilities in the NIST CVE database and their associated products on a daily schedule. The spreadsheet can then be manually interpreted for risk to your specific organization. Based off of an opensource product...
Exploit for OS Command Injection in Apache Tomcat
CVE-2019-0232 Vulnerability analysis and PoC for the Apache To...
Important: tomcat8
Issue Overview: A deserialization flaw was discovered in Apache Tomcat's use of a FileStore. Under specific circumstances, an attacker can use a specially crafted request to trigger Remote Code Execution through deserialization of the file under their control. The highest threat from the...
Important Photon OS Security Update - PHSA-2021-0375
Updates of 'linux', 'linux-esx' packages of Photon OS have been released...
Potential remote code execution in Apache Tomcat
The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the...
Security Bulletin: : App Connect Professional is affected by Apache Tomcat vulnerabilities.
Summary App Connect Professional has addressed the following vulnerabilities reported in Apache Tomcat. Vulnerability Details CVEID: CVE-2020-17527 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by an issue when the HTTP request header value can b...
Apache Tomcat <= 5.5.25 CSRF Vulnerability - Windows
Apache Tomcat is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
Apache Tomcat <= 5.5.25 CSRF Vulnerability - Linux
Apache Tomcat is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...