| CVE-2024-56337 |
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat
|
Not rated
|
Dec 20, 2024 |
| CVE-2024-54677 |
Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to…
|
Not rated
|
Dec 17, 2024 |
| CVE-2024-50379 |
Apache Tomcat: RCE due to TOCTOU issue in JSP compilation
|
Not rated
|
Dec 17, 2024 |
| CVE-2024-52318 |
Incorrect object recycling and reuse vulnerability in Apache Tomcat
|
Not rated
|
Nov 18, 2024 |
| CVE-2024-52317 |
Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the request and response…
|
Not rated
|
Nov 18, 2024 |
| CVE-2024-52316 |
Unchecked Error Condition vulnerability in Apache Tomcat
|
Not rated
|
Nov 18, 2024 |
| CVE-2024-38286 |
Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat
|
8.6
High
|
Nov 7, 2024 |
| CVE-2024-34750 |
Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat
|
Not rated
|
Jul 3, 2024 |
| CVE-2024-23672 |
Denial of Service via incomplete cleanup vulnerability in Apache Tomcat
|
Not rated
|
Mar 13, 2024 |
| CVE-2024-24549 |
Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat
|
Not rated
|
Mar 13, 2024 |
| CVE-2024-21733 |
Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache…
|
Not rated
|
Jan 19, 2024 |
| CVE-2023-46589 |
Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1…
|
Not rated
|
Nov 28, 2023 |
| CVE-2023-45648 |
Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1…
|
Not rated
|
Oct 10, 2023 |
| CVE-2023-42795 |
Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from…
|
Not rated
|
Oct 10, 2023 |
| CVE-2023-42794 |
Incomplete Cleanup vulnerability in Apache Tomcat
|
Not rated
|
Oct 10, 2023 |
| CVE-2023-41080 |
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This…
|
Not rated
|
Aug 25, 2023 |
| CVE-2023-34981 |
A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response…
|
Not rated
|
Jun 21, 2023 |
| CVE-2023-28709 |
The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73…
|
Not rated
|
May 22, 2023 |
| CVE-2023-28708 |
When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto…
|
Not rated
|
Mar 22, 2023 |
| CVE-2023-24998 |
Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the…
|
Not rated
|
Feb 20, 2023 |
| CVE-2022-45143 |
The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type,…
|
Not rated
|
Jan 3, 2023 |
| CVE-2022-42252 |
If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to…
|
Not rated
|
Nov 1, 2022 |
| CVE-2021-43980 |
The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47…
|
Not rated
|
Sep 28, 2022 |
| CVE-2022-34305 |
In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form…
|
Not rated
|
Jun 23, 2022 |
| CVE-2022-25762 |
If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache…
|
Not rated
|
May 13, 2022 |