| Apache Tomcat Improper Access Control vulnerabilityCVE-2016-8735 · GHSA-CW54-59PW-4G8C |
org.apache.tomcat:tomcat-catalina-jmx-remoteorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Concurrent Execution using Shared Resource with Improper Synchronization in Apache TomcatCVE-2016-8745 · GHSA-W3J5-Q8F2-3CQQ |
org.apache.tomcat:tomcat-utilRed Hat JBoss Enterprise Web Server 2/tomcat6 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Improper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2015-5345 · GHSA-RH8Q-VJGF-GF74 |
org.apache.tomcat:tomcatRed Hat JBoss BRMS 5/jbossweb |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Tomcat information exposure vulnerabilityCVE-2018-1305 · GHSA-JX6H-3FJX-CGV5 |
org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Enterprise Web Server 2/tomcat7 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Tomcat unauthorized access vulnerabilityCVE-2018-1304 · GHSA-6RXJ-58JH-436R |
org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Data Grid 6/jbossweb |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| System Property Disclosure in Apache TomcatCVE-2016-6794 · GHSA-2RVF-329F-P99G |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Tomcat vulnerable to SecurityManager bypassCVE-2016-6796 · GHSA-3MJP-P938-4329 |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| The host name verification missing in Apache TomcatCVE-2018-8034 · GHSA-46J3-R4PJ-4835 |
org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Data Virtualization 6/jbossweb |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Exposure of Resource to Wrong Sphere in Apache TomcatCVE-2017-5648 · GHSA-3VX3-XF6Q-R5XP |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Authentication Bypass Using an Alternate Path or Channel in Apache TomcatCVE-2016-5018 · GHSA-4V3G-G84W-HV7R |
org.apache.tomcat.embed:tomcat-embed-jasperorg.apache.tomcat:jasper |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Apache Tomcat OS Command Injection vulnerabilityCVE-2019-0232 · GHSA-8VMX-QMCH-MPQG |
org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Enterprise Web Server 2/tomcat6 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Incorrect Authorization in Apache TomcatCVE-2016-6797 · GHSA-Q6X7-F33R-3WXX |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder CVE-2018-1336 · GHSA-M59C-JPC8-M2X4 |
org.apache.tomcat.embed:tomcat-embed-coreRed Hat AMQ Broker 7/tomcat |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all originsCVE-2018-8014 · GHSA-R4X2-3CQ5-HQVP |
org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Enterprise Application Platform 5/jbossweb |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Observable Discrepancy in Apache TomcatCVE-2016-0762 · GHSA-WXCP-F2C8-X6XV |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper Access Control in Apache TomcatCVE-2016-5388 · GHSA-V646-RX6W-R3QQ |
org.apache.tomcat:tomcat-catalinaRed Hat JBoss Enterprise Application Platform 5/jbossas |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Tomcat Open Redirect vulnerabilityCVE-2018-11784 · GHSA-5Q99-F34M-67GC |
org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Data Grid 6/jbossweb |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper Input Validation in Apache TomcatCVE-2016-6816 · GHSA-JC7P-5R39-9477 |
org.apache.tomcat:tomcat-coyoteRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Insufficient Verification of Data Authenticity in Apache TomcatCVE-2017-7674 · GHSA-73RX-3F9R-X949 |
org.apache.tomcat:tomcatRed Hat JBoss Enterprise Web Server 2/tomcat6 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2017-12616 · GHSA-8QQ4-8JVQ-MFW4 |
org.apache.tomcat:tomcat-catalinaRed Hat Enterprise Linux 6/tomcat6 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
