Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 79

Export CSV
CVE-2007-0450

tomcat directory traversal

Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) "/" (slash), (2) "\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.

CVSS 2.0 · 5.0 Medium EPSS 91.2% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Tomcat Certificate System and 5 more
CVE-2007-1349

mod_perl PerlRun denial of service

PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.

CVSS 2.0 · 5.0 Medium EPSS 10.4% KEV · Not listed
Vendors
Apache Canonical Redhat
Products
Mod Perl Ubuntu Linux Certificate System and 9 more
CVE-2007-1358

tomcat accept-language xss flaw

Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616".

CVSS 2.0 · 2.6 Low EPSS 19.9% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Certificate System Enterprise Linux and 4 more
CVE-2007-1863

httpd mod_cache segfault

cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is used, allows remote attackers to cause a denial of service (child processing handler crash) via a request with the (1) s-maxage, (2) max-age, (3) min-fresh, or (4) max-stale Cache-Control headers without a value.

CVSS 2.0 · 5.0 Medium EPSS 11.8% KEV · Not listed
Vendors
Apache Apple Redhat
Products
Http Server Mac Os X Server Certificate System and 2 more
CVE-2007-3304

httpd scoreboard lack of PID protection

Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."

CVSS 2.0 · 4.7 Medium EPSS 3.3% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 1 more
Products
Http Server Ubuntu Linux Fedora and 8 more
CVE-2007-3382

tomcat handling of cookies

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks.

CVSS 2.0 · 4.3 Medium EPSS 37.5% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Certificate System Enterprise Linux and 4 more
CVE-2007-3385

tomcat handling of cookie values

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.

CVSS 2.0 · 4.3 Medium EPSS 16.9% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Certificate System Enterprise Linux and 4 more
CVE-2007-3847

httpd: out of bounds read

The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.

CVSS 2.0 · 5.0 Medium EPSS 12.9% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 1 more
Products
Http Server Ubuntu Linux Fedora and 4 more
CVE-2007-4465

mod_autoindex XSS

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

CVSS 3.1 · 6.1 Medium EPSS 26.2% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Certificate System Enterprise Linux and 3 more
CVE-2007-4994

rhcs CRL can get corrupted

Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certain revoked certificates from appearing on the CRL quickly and allow users with revoked certificates to bypass the intended CRL.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Redhat
Products
Certificate Server Certificate System
CVE-2007-5000

httpd: mod_imagemap XSS

Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 46.6% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 4 more
Products
Http Server Ubuntu Linux Fedora and 9 more
CVE-2007-5116

perl regular expression UTF parsing errors

Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.

CVSS 2.0 · 7.5 High EPSS 4.8% KEV · Not listed
Vendors
Debian Larry Wall Mandrakesoft and 3 more
Products
Debian Linux Perl Mandrake Linux and 9 more
CVE-2005-2090

tomcat multiple content-length header poisioning

Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."

CVSS 2.0 · 4.3 Medium EPSS 26.1% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Certificate System Enterprise Linux and 4 more
CVE-2005-3510

tomcat DoS

Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web directory that has a large number of files.

CVSS 2.0 · 5.0 Medium EPSS 6.0% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Certificate System Network Satellite and 1 more
CVE-2006-3835

tomcat directory listing issue

Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.

CVSS 2.0 · 5.0 Medium EPSS 48.1% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Certificate System Network Satellite and 1 more
CVE-2006-3918

httpd: Expect header XSS

http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.

CVSS 2.0 · 4.3 Medium EPSS 95.1% KEV · Not listed
Vendors
Apache Canonical Debian and 1 more
Products
Http Server Ubuntu Linux Debian Linux and 6 more
CVE-2013-1885

System: pki-tps XSS flaw

Multiple cross-site scripting (XSS) vulnerabilities in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) tus/ or (2) tus/tus/.

CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat
Products
Certificate System Dogtag Certificate System
CVE-2013-1886

System: pki-tps format string injection

Format string vulnerability in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in unspecified vectors, related to viewing certificates.

CVSS 2.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Redhat
Products
Certificate System Dogtag Certificate System
CVE-2012-3367

System: CA certificate can be revoked

Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.

CVSS 2.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat
Products
Certificate System Dogtag Certificate System
CVE-2012-4543

System: Multiple cross-site scripting flaws by displaying CRL or processing profile

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize to the displayCRL script, or (3) nonce variable to the profileProcess script.

CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat
Products
Certificate System Enterprise Linux