Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-xvz4-nm7g-2fee
Summary
Improper Input Validation
java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service (thread consumption) by using a "Content-Length: 0" AJP request to trigger a hang in request processing.
Aliases
0
alias CVE-2014-0095
1
alias GHSA-wf5v-jhxj-q632
Fixed_packages
0
url pkg:apache/tomcat@8.0.5
purl pkg:apache/tomcat@8.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-xjj5-fy4e-e7ha
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@8.0.5
1
url pkg:maven/org.apache.tomcat/tomcat@8.0.5
purl pkg:maven/org.apache.tomcat/tomcat@8.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2kjh-4r2g-rqe6
1
vulnerability VCID-5m85-3zyu-7qak
2
vulnerability VCID-5udv-rheh-kqfy
3
vulnerability VCID-6umz-z8db-kqcy
4
vulnerability VCID-6uuq-2a39-yubx
5
vulnerability VCID-937w-2w2q-7fdy
6
vulnerability VCID-axzz-cadr-b7fv
7
vulnerability VCID-cugj-j48z-jub5
8
vulnerability VCID-e2gy-1c6a-6fdf
9
vulnerability VCID-fqyx-8pgs-uqgg
10
vulnerability VCID-fukm-h3r6-s7cr
11
vulnerability VCID-g3vd-74yh-s7bn
12
vulnerability VCID-gmjm-6ck2-skgu
13
vulnerability VCID-hqzu-shyu-j3hp
14
vulnerability VCID-j1m6-79yt-f7h5
15
vulnerability VCID-jzta-navk-87bn
16
vulnerability VCID-n4zk-mdyw-3fcz
17
vulnerability VCID-nnye-4xbb-kuf5
18
vulnerability VCID-pq53-6deg-abfx
19
vulnerability VCID-q7g1-m4e7-pya4
20
vulnerability VCID-rtmv-qetu-yqfa
21
vulnerability VCID-s37s-p75k-27e6
22
vulnerability VCID-se44-f85s-xyex
23
vulnerability VCID-tcmv-6ftg-fqen
24
vulnerability VCID-u95s-xhwk-vka6
25
vulnerability VCID-vu84-dfwa-z3dg
26
vulnerability VCID-xjj5-fy4e-e7ha
27
vulnerability VCID-y9hs-ymcm-3ucx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.0.5
2
url pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.5
purl pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kgu-zupu-tydw
1
vulnerability VCID-cugj-j48z-jub5
2
vulnerability VCID-y9hs-ymcm-3ucx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.5
3
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.5
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kgu-zupu-tydw
1
vulnerability VCID-9e2b-7qtg-tbaj
2
vulnerability VCID-axzz-cadr-b7fv
3
vulnerability VCID-ct4z-hxx3-53bw
4
vulnerability VCID-cugj-j48z-jub5
5
vulnerability VCID-fqyx-8pgs-uqgg
6
vulnerability VCID-gmjm-6ck2-skgu
7
vulnerability VCID-rbvh-4npk-nub9
8
vulnerability VCID-se44-f85s-xyex
9
vulnerability VCID-webw-gryb-7ucv
10
vulnerability VCID-xa95-zsnk-3kg9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.5
Affected_packages
0
url pkg:apache/tomcat@8.0.0-RC2
purl pkg:apache/tomcat@8.0.0-RC2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-xvz4-nm7g-2fee
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@8.0.0-RC2
1
url pkg:apache/tomcat@8.0.3
purl pkg:apache/tomcat@8.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1b-3pdg-jbfq
1
vulnerability VCID-937w-2w2q-7fdy
2
vulnerability VCID-nnye-4xbb-kuf5
3
vulnerability VCID-xvz4-nm7g-2fee
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@8.0.3
2
url pkg:maven/org.apache.tomcat/tomcat@8.0.0-RC2
purl pkg:maven/org.apache.tomcat/tomcat@8.0.0-RC2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-xvz4-nm7g-2fee
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.0.0-RC2
3
url pkg:maven/org.apache.tomcat/tomcat@8.0.3
purl pkg:maven/org.apache.tomcat/tomcat@8.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1b-3pdg-jbfq
1
vulnerability VCID-2kjh-4r2g-rqe6
2
vulnerability VCID-5m85-3zyu-7qak
3
vulnerability VCID-5udv-rheh-kqfy
4
vulnerability VCID-6umz-z8db-kqcy
5
vulnerability VCID-6uuq-2a39-yubx
6
vulnerability VCID-937w-2w2q-7fdy
7
vulnerability VCID-axzz-cadr-b7fv
8
vulnerability VCID-cugj-j48z-jub5
9
vulnerability VCID-e2gy-1c6a-6fdf
10
vulnerability VCID-fqyx-8pgs-uqgg
11
vulnerability VCID-fukm-h3r6-s7cr
12
vulnerability VCID-g3vd-74yh-s7bn
13
vulnerability VCID-gmjm-6ck2-skgu
14
vulnerability VCID-hqzu-shyu-j3hp
15
vulnerability VCID-j1m6-79yt-f7h5
16
vulnerability VCID-jzta-navk-87bn
17
vulnerability VCID-n4zk-mdyw-3fcz
18
vulnerability VCID-nnye-4xbb-kuf5
19
vulnerability VCID-pq53-6deg-abfx
20
vulnerability VCID-q7g1-m4e7-pya4
21
vulnerability VCID-rtmv-qetu-yqfa
22
vulnerability VCID-s37s-p75k-27e6
23
vulnerability VCID-se44-f85s-xyex
24
vulnerability VCID-tcmv-6ftg-fqen
25
vulnerability VCID-u95s-xhwk-vka6
26
vulnerability VCID-vu84-dfwa-z3dg
27
vulnerability VCID-xjj5-fy4e-e7ha
28
vulnerability VCID-xvz4-nm7g-2fee
29
vulnerability VCID-y9hs-ymcm-3ucx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.0.3
4
url pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.0-RC1
purl pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3txt-1psa-5kf5
1
vulnerability VCID-cugj-j48z-jub5
2
vulnerability VCID-xvz4-nm7g-2fee
3
vulnerability VCID-y9hs-ymcm-3ucx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.0-RC1
5
url pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.0-RC3
purl pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.0-RC3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3txt-1psa-5kf5
1
vulnerability VCID-cugj-j48z-jub5
2
vulnerability VCID-xvz4-nm7g-2fee
3
vulnerability VCID-y9hs-ymcm-3ucx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.0-RC3
6
url pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.0-RC5
purl pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.0-RC5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3txt-1psa-5kf5
1
vulnerability VCID-cugj-j48z-jub5
2
vulnerability VCID-xvz4-nm7g-2fee
3
vulnerability VCID-y9hs-ymcm-3ucx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.0-RC5
7
url pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.0-RC10
purl pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.0-RC10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3txt-1psa-5kf5
1
vulnerability VCID-cugj-j48z-jub5
2
vulnerability VCID-xvz4-nm7g-2fee
3
vulnerability VCID-y9hs-ymcm-3ucx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.0-RC10
8
url pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.1
purl pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1b-3pdg-jbfq
1
vulnerability VCID-1kgu-zupu-tydw
2
vulnerability VCID-3txt-1psa-5kf5
3
vulnerability VCID-cugj-j48z-jub5
4
vulnerability VCID-xvz4-nm7g-2fee
5
vulnerability VCID-y9hs-ymcm-3ucx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.1
9
url pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.3
purl pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1b-3pdg-jbfq
1
vulnerability VCID-1kgu-zupu-tydw
2
vulnerability VCID-cugj-j48z-jub5
3
vulnerability VCID-xvz4-nm7g-2fee
4
vulnerability VCID-y9hs-ymcm-3ucx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.3
10
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0-RC1
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cugj-j48z-jub5
1
vulnerability VCID-fqyx-8pgs-uqgg
2
vulnerability VCID-xvz4-nm7g-2fee
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0-RC1
11
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0-RC3
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0-RC3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cugj-j48z-jub5
1
vulnerability VCID-fqyx-8pgs-uqgg
2
vulnerability VCID-xvz4-nm7g-2fee
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0-RC3
12
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0-RC5
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0-RC5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cugj-j48z-jub5
1
vulnerability VCID-fqyx-8pgs-uqgg
2
vulnerability VCID-xvz4-nm7g-2fee
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0-RC5
13
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0-RC10
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0-RC10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cugj-j48z-jub5
1
vulnerability VCID-fqyx-8pgs-uqgg
2
vulnerability VCID-xvz4-nm7g-2fee
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0-RC10
14
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.1
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kgu-zupu-tydw
1
vulnerability VCID-9e2b-7qtg-tbaj
2
vulnerability VCID-axzz-cadr-b7fv
3
vulnerability VCID-ct4z-hxx3-53bw
4
vulnerability VCID-cugj-j48z-jub5
5
vulnerability VCID-fqyx-8pgs-uqgg
6
vulnerability VCID-gmjm-6ck2-skgu
7
vulnerability VCID-rbvh-4npk-nub9
8
vulnerability VCID-se44-f85s-xyex
9
vulnerability VCID-webw-gryb-7ucv
10
vulnerability VCID-xa95-zsnk-3kg9
11
vulnerability VCID-xvz4-nm7g-2fee
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.1
15
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.3
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kgu-zupu-tydw
1
vulnerability VCID-9e2b-7qtg-tbaj
2
vulnerability VCID-axzz-cadr-b7fv
3
vulnerability VCID-ct4z-hxx3-53bw
4
vulnerability VCID-cugj-j48z-jub5
5
vulnerability VCID-fqyx-8pgs-uqgg
6
vulnerability VCID-gmjm-6ck2-skgu
7
vulnerability VCID-rbvh-4npk-nub9
8
vulnerability VCID-se44-f85s-xyex
9
vulnerability VCID-webw-gryb-7ucv
10
vulnerability VCID-xa95-zsnk-3kg9
11
vulnerability VCID-xvz4-nm7g-2fee
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.3
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0095.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0095.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0095
reference_id
reference_type
scores
0
value 0.09656
scoring_system epss
scoring_elements 0.93047
published_at 2026-06-04T12:55:00Z
1
value 0.09656
scoring_system epss
scoring_elements 0.93058
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0095
2
reference_url http://seclists.org/fulldisclosure/2014/May/134
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2014/May/134
3
reference_url http://secunia.com/advisories/59873
reference_id
reference_type
scores
url http://secunia.com/advisories/59873
4
reference_url http://secunia.com/advisories/60729
reference_id
reference_type
scores
url http://secunia.com/advisories/60729
5
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat
6
reference_url https://github.com/apache/tomcat80/commit/77590c897f0e542fe363d70efdf3b82209510aee
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat80/commit/77590c897f0e542fe363d70efdf3b82209510aee
7
reference_url https://github.com/apache/tomcat/commit/8884dae60ace77a87ed9385442ce429e98c3a479
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/8884dae60ace77a87ed9385442ce429e98c3a479
8
reference_url https://svn.apache.org/viewvc?view=rev&rev=1578392
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1578392
9
reference_url http://svn.apache.org/viewvc?view=revision&revision=1578392
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1578392
10
reference_url https://web.archive.org/web/20140713043210/http://www.securitytracker.com/id/1030300
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140713043210/http://www.securitytracker.com/id/1030300
11
reference_url https://web.archive.org/web/20141126170141/http://www.securityfocus.com/bid/67673
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20141126170141/http://www.securityfocus.com/bid/67673
12
reference_url https://web.archive.org/web/20151017043748/http://secunia.com/advisories/60729
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20151017043748/http://secunia.com/advisories/60729
13
reference_url https://web.archive.org/web/20161024215453/http://secunia.com/advisories/59873
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20161024215453/http://secunia.com/advisories/59873
14
reference_url http://tomcat.apache.org/security-8.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-8.html
15
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21678231
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www-01.ibm.com/support/docview.wss?uid=swg21678231
16
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21681528
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www-01.ibm.com/support/docview.wss?uid=swg21681528
17
reference_url http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
18
reference_url http://www.securityfocus.com/bid/67673
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/67673
19
reference_url http://www.securitytracker.com/id/1030300
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1030300
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1103804
reference_id 1103804
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1103804
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0095
reference_id CVE-2014-0095
reference_type
scores
0
value Important
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0095
22
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0095
reference_id CVE-2014-0095
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0095
23
reference_url https://github.com/advisories/GHSA-wf5v-jhxj-q632
reference_id GHSA-wf5v-jhxj-q632
reference_type
scores
url https://github.com/advisories/GHSA-wf5v-jhxj-q632
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 130
name Improper Handling of Length Parameter Inconsistency
description The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.
4
cwe_id 835
name Loop with Unreachable Exit Condition ('Infinite Loop')
description The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Exploits
Severity_range_score4.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-xvz4-nm7g-2fee