Search for packages
purl | pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0-RC10 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-74gj-w1me-aaaj
Aliases: CVE-2014-0095 GHSA-wf5v-jhxj-q632 |
java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service (thread consumption) by using a "Content-Length: 0" AJP request to trigger a hang in request processing. |
Affected by 1 other vulnerability. Affected by 20 other vulnerabilities. |
VCID-b2z1-15m4-aaac
Aliases: CVE-2018-1336 GHSA-m59c-jpc8-m2x4 |
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder |
Affected by 13 other vulnerabilities. Affected by 34 other vulnerabilities. Affected by 36 other vulnerabilities. |
VCID-cp4z-y57s-aaah
Aliases: CVE-2018-8014 GHSA-r4x2-3cq5-hqvp |
The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins |
Affected by 10 other vulnerabilities. Affected by 31 other vulnerabilities. Affected by 1 other vulnerability. Affected by 33 other vulnerabilities. |
VCID-rjmz-fcp1-aaac
Aliases: CVE-2020-8022 GHSA-gc58-v8h3-x2gr |
Incorrect Default Permissions in Apache Tomcat |
Affected by 10 other vulnerabilities. Affected by 21 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |