Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat-util@7.0.14 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-xh5x-j8jf-pcpx
Aliases: CVE-2014-0099 |
Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, … |
Vulnerable |
|
CVE-2019-0232
|
Improper Input Validation When running on Windows with `enableCmdLineArguments` enabled, the CGI Servlet in Apache Tomcat is vulnerable to Remote … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2019-0221
|
Cross-site Scripting The SSI `printenv` command in Apache Tomcat echoes user provided data without escaping and is, therefore, vulnerable to … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2018-1336
|
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the … |
Vulnerable Vulnerable Vulnerable Not vulnerable |
|
CVE-2020-1935
|
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) In Apache Tomcat, the HTTP header parsing code used an approach to … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-24122
|
Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP … |
Vulnerable Vulnerable Not vulnerable Vulnerable |
|
GHSA-w3j5-q8f2-3cqq
Aliases: CVE-2016-8745 |
Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat A bug in the error handling of the send … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |