Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Apache Struts Command Injection VulnerabilityPatch nowKEVEPSS 96.05%Apr 26, 2016
- Medium6.3The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does n…Check this weekEPSS 11.30%Feb 25, 2016
- High8.8The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes,…Check this weekEPSS 13.08%Feb 25, 2016
- Medium4.3Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the o…Check if you run itEPSS 6.23%Feb 25, 2016
- High8.8The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF token…Check if you run itEPSS 9.67%Feb 25, 2016
- High8.1Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments…Check this weekEPSS 10.57%Feb 25, 2016
- Medium5.3The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security…Check this weekEPSS 18.38%Feb 25, 2016
- Medium4.3Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to…Check this weekEPSS 12.55%Feb 25, 2016
- UnknownRed Hat data_grid Deserialization of Untrusted DataPatch nowKEVEPSS 85.56%Jan 28, 2016
- Critical9.8IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.Patch nowKEVEPSS 97.76%Jan 2, 2016
- Critical9.8Oracle WebLogic Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 94.99%Nov 18, 2015
- Medium5.0The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of…Check this weekEPSS 13.87%Jun 7, 2015
- High7.8Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of a…Check this weekEPSS 20.18%Jun 7, 2015
- High7.5Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (…Check this weekEPSS 12.76%Mar 9, 2015
- Medium6.4java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle atte…Check this weekEPSS 21.04%Feb 16, 2015
- High8.8GNU Bash OS Command Injection VulnerabilityPatch nowKEVEPSS 99.68%Sep 30, 2014
- Critical9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 99.94%Sep 24, 2014
- Critical9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Sep 24, 2014
- Medium4.3Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT styles…Check if you run itEPSS 7.62%May 31, 2014
- Medium4.3Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse…Check if you run itEPSS 8.84%May 31, 2014
- Medium4.3java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly…Check if you run itEPSS 6.91%May 31, 2014
- Medium5.0Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, a…Check this weekEPSS 20.06%May 31, 2014
- High7.5Apache commons_beanutils Improper Input ValidationPatch nowKEVEPSS 99.03%Apr 30, 2014
- UnknownApache Harmony SecureRandom Security BypassPatch nowKEVEPSS 2.43%Aug 14, 2013
- Critical9.8Apache Struts Improper Input Validation VulnerabilityPatch nowKEVEPSS 100.00%Jul 18, 2013