Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.33 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-475f-74wp-pqv5
Aliases: CVE-2014-0075 |
Integer Overflow or Wraparound in Apache Tomcat Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, … |
Vulnerable |
|
CVE-2020-1938
|
Improper Input Validation When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-13935
|
Loop with Unreachable Exit Condition (Infinite Loop) The payload length in a WebSocket frame was not correctly validated in Apache … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2013-2185
|
Arbitrary file upload via deserialization A remote attacker able to supply a serialized instance of the DiskFileItem class, which will … |
Vulnerable |
|
CVE-2020-1935
|
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) In Apache Tomcat M1 to to to the HTTP header parsing code … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-24122
|
Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-qq5r-98hh-rxc9
Aliases: CVE-2026-24733 |
Apache Tomcat - Security constraint bypass with HTTP/0.9 Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 … |
Vulnerable |
|
CVE-2014-0050
|
Denial of service `MultipartStream.java` in this package allows remote attackers to cause a denial of service (infinite loop and CPU … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-jc7p-5r39-9477
Aliases: CVE-2016-6816 |
Improper Input Validation in Apache Tomcat The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-563x-q5rq-57qp
Aliases: CVE-2026-24880 |
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat … |
Vulnerable Vulnerable Vulnerable |