| CVE-2024-56337 |
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat
|
Non notée
|
20 déc. 2024 |
| CVE-2024-54677 |
Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to…
|
Non notée
|
17 déc. 2024 |
| CVE-2024-50379 |
Apache Tomcat: RCE due to TOCTOU issue in JSP compilation
|
Non notée
|
17 déc. 2024 |
| CVE-2024-52318 |
Incorrect object recycling and reuse vulnerability in Apache Tomcat
|
Non notée
|
18 nov. 2024 |
| CVE-2024-52317 |
Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the request and response…
|
Non notée
|
18 nov. 2024 |
| CVE-2024-52316 |
Unchecked Error Condition vulnerability in Apache Tomcat
|
Non notée
|
18 nov. 2024 |
| CVE-2024-38286 |
Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat
|
8.6
Élevée
|
7 nov. 2024 |
| CVE-2024-34750 |
Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat
|
Non notée
|
3 juil. 2024 |
| CVE-2024-23672 |
Denial of Service via incomplete cleanup vulnerability in Apache Tomcat
|
Non notée
|
13 mars 2024 |
| CVE-2024-24549 |
Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat
|
Non notée
|
13 mars 2024 |
| CVE-2024-21733 |
Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache…
|
Non notée
|
19 janv. 2024 |
| CVE-2023-46589 |
Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1…
|
Non notée
|
28 nov. 2023 |
| CVE-2023-45648 |
Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1…
|
Non notée
|
10 oct. 2023 |
| CVE-2023-42795 |
Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from…
|
Non notée
|
10 oct. 2023 |
| CVE-2023-42794 |
Incomplete Cleanup vulnerability in Apache Tomcat
|
Non notée
|
10 oct. 2023 |
| CVE-2023-41080 |
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This…
|
Non notée
|
25 août 2023 |
| CVE-2023-34981 |
A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response…
|
Non notée
|
21 juin 2023 |
| CVE-2023-28709 |
The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73…
|
Non notée
|
22 mai 2023 |
| CVE-2023-28708 |
When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto…
|
Non notée
|
22 mars 2023 |
| CVE-2023-24998 |
Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the…
|
Non notée
|
20 févr. 2023 |
| CVE-2022-45143 |
The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type,…
|
Non notée
|
3 janv. 2023 |
| CVE-2022-42252 |
If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to…
|
Non notée
|
1 nov. 2022 |
| CVE-2021-43980 |
The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47…
|
Non notée
|
28 sept. 2022 |
| CVE-2022-34305 |
In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form…
|
Non notée
|
23 juin 2022 |
| CVE-2022-25762 |
If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache…
|
Non notée
|
13 mai 2022 |