8606 matches found
Apache Tomcat 3.1 - Path Revealing
Apache Tomcat 3.1 - Path Revealing source: https://www.securityfocus.com/bid/1531/info A vulnerability exists in the JSP portion of the Tomcat package, version 3.1, from the Apache Software Foundation. Upon hitting an nonexistent JSP file, too much information is presented by the server as part o...
Fixed in Apache Tomcat 3.3a
Moderate: Information disclosure CVE-2002-2007 Non-standard requests to the sample applications installed by default could result in unexpected directory listings or disclosure of the full file system path for a JSP. Affects: 3.2.3-3.2.4 Low: Information disclosure CVE-2002-2006, CVE-2000-0760 Th...
Security bug in Apache project: Jakarta Tomcat
The Apache project: Jakarta Tomcat contains a serius security bug. Tomcat is used together with the Apache web server to serve Java Server Pages and Java servlets. Summary from the Tomcat development team advisory is posted below: Advisory: Delivered with Tomcat is an example jsp/source.jsp that...
Fixed in Apache Tomcat 3.1
Important: Information disclosure CVE-2000-1210 source.jsp, provided as part of the examples, allows an attacker to read arbitrary files via a .. dot dot in the argument to source.jsp. Affects: 3.0...
CVE-2023-42778
This CVE ID is rejected as unused by its Numbering Authority and does not represent an active vulnerability entry.
CVE-2023-22431
CVE-2023-22431 has been rejected by its CNA as unused and does not represent an active vulnerability.
CVE-2023-40157
This CVE ID has been rejected by its CNA as unused and does not represent an active vulnerability entry.
CVE-2023-27880
This CVE ID has been rejected by its CVE Numbering Authority as unused , and does not represent an active vulnerability entry.
CVE-2023-35761
This CVE ID has been rejected as unused and does not represent an active vulnerability entry.
CVE-2023-24541
This CVE ID is rejected by its CNA as unused and does not represent an active vulnerability entry.