High Security Advisories for org.apache.tomcat.embed:tomcat-embed-core in maven Clear Filters
High
4 months ago
Apache Tomcat - DoS in multipart upload
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
High
10 months ago
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
High
over 1 year ago
Apache Tomcat - Denial of Service
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
High
about 2 years ago
Apache Tomcat - Fix for CVE-2023-24998 was incomplete
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
over 2 years ago
Apache Tomcat vulnerable to information leak
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
over 2 years ago
Apache Tomcat improperly escapes input from JsonErrorReportValve
maven
org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-catalina, org.apache.tomcat.embed:tomcat-embed-core
High
almost 3 years ago
Apache Tomcat may reject request containing invalid Content-Length header
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
over 3 years ago
Unrestricted Upload of File with Dangerous Type Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
High
over 4 years ago
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
High
over 4 years ago
Potential remote code execution in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
High
over 5 years ago
Apache Tomcat Denial of Service vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core
High
almost 6 years ago
Insufficiently Protected Credentials in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
High
almost 6 years ago
In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack
maven
org.apache.tomcat.embed:tomcat-embed-core
High
over 6 years ago
Improper Locking in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
High
over 6 years ago
Apache Tomcat OS Command Injection vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core
High
almost 7 years ago
The host name verification missing in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
High
almost 7 years ago
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder
maven
org.apache.tomcat.embed:tomcat-embed-core
High
almost 7 years ago
When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server
maven
org.apache.tomcat.embed:tomcat-embed-core