Lucene search
+L

13664 matches found

OSV
OSV
added 2023/11/28 6:30 p.m.11 views

GHSA-FCCV-JMMP-QG76 Apache Tomcat Improper Input Validation vulnerability

Improper Input Validation vulnerability in Apache Tomcat. Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82, and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could...

7.5CVSS6.7AI score0.02651EPSS
SaveExploits0References15
OSV
OSV
added 2023/11/28 4:15 p.m.5 views

DEBIAN-CVE-2023-46589

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could...

7.5CVSS6.8AI score0.02651EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/28 4:15 p.m.22 views

CVE-2023-46589

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could...

7.5CVSS0.02651EPSS
SaveExploits0References4
Prion
Prion
added 2023/11/28 4:15 p.m.45 views

Input validation

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could...

5CVSS6.8AI score0.02651EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2023/11/28 4:15 p.m.86 views

CVE-2023-46589

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could...

7.5CVSS6.7AI score0.02651EPSS
SaveExploits0References11
OSV
OSV
added 2023/11/28 4:15 p.m.7 views

UBUNTU-CVE-2023-46589

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could...

7.5CVSS6.7AI score0.02651EPSS
SaveExploits0References12
OSV
OSV
added 2023/11/28 3:31 p.m.44 views

CVE-2023-46589 Apache Tomcat: HTTP request smuggling via malformed trailer headers

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could...

7.5CVSS6.7AI score
SaveExploits0References6
CVE
CVE
added 2023/11/28 3:31 p.m.788 views

CVE-2023-46589

CVE-2023-46589 : Improper input validation in Apache Tomcat allows HTTP trailer headers to exceed the header size limit, causing the server to treat a single request as multiple requests and enabling potential request smuggling when behind a reverse proxy. Affected lines cover Tomcat releases fro...

7.5CVSS7.7AI score0.02651EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/28 3:31 p.m.42 views

CVE-2023-46589 Apache Tomcat: HTTP request smuggling via malformed trailer headers

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could...

7.7AI score0.02651EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/11/28 3:31 p.m.259 views

CVE-2023-46589 Apache Tomcat: HTTP request smuggling via malformed trailer headers

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could...

7.9AI score0.02651EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2023/11/28 3:31 p.m.85 views

CVE-2023-46589

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could...

7.5CVSS7.9AI score0.02651EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/11/28 12:00 a.m.16 views

Apache Tomcat < 9.0.83 Vulnerability

Binary data 701453.pasl...

7.5CVSS7.3AI score0.02651EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/11/28 12:00 a.m.436 views

Apache Tomcat 9.0.0.M1 < 9.0.83

The version of Tomcat installed on the remote host is prior to 9.0.83. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.83security-9 advisory. - Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-...

7.5CVSS6.9AI score0.02651EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/28 12:00 a.m.6 views

Apache Tomcat Environment Issue Vulnerability

Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server . It is used to implement support for Servlets and JavaServer Page JSP. Apache Tomcat suffers from an environmental issue vulnerability that stems from the presence of an incorrect input validation...

7.5CVSS6.6AI score0.02651EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2023/11/28 12:00 a.m.47 views

Apache Tomcat 10.1.0.M1 < 10.1.16

The version of Tomcat installed on the remote host is prior to 10.1.16. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat10.1.16security-10 advisory. - Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from...

7.5CVSS6.9AI score0.02651EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/11/28 12:00 a.m.13 views

Apache Tomcat < 10.1.16 Vulnerability

Binary data 701452.pasl...

7.5CVSS7.3AI score0.02651EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/11/28 12:00 a.m.126 views

Apache Tomcat 8.5.0 < 8.5.96

The version of Tomcat installed on the remote host is prior to 8.5.96. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat8.5.96security-8 advisory. - Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-...

7.5CVSS6.9AI score0.02651EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/11/28 12:00 a.m.13 views

Apache Tomcat < 8.5.96 Vulnerability

Binary data 701454.pasl...

7.5CVSS7.3AI score0.02651EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2023/11/24 1:49 p.m.98 views

Security Bulletin: IBM Rational Build Forge 8.0.0.25 addresses multiple vulnerabilities

Summary IBM Rational Build Forge 8.0.0.25 addresses multiple vulnerabilities Vulnerability Details CVEID:CVE-2023-42794 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by accumulation of temporary files on Windows when a web application opened a stream for an uploaded file...

7.8CVSS8.3AI score0.89529EPSS
SaveExploits2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/11/24 12:00 a.m.61 views

Atlassian Confluence 7.13.x / 7.19.1 < 7.19.16 (CONFSERVER-93173)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-93173 advisory. - The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values...

7.5CVSS7.5AI score0.02505EPSS
SaveExploits0References2
Rows per page
Query Builder