Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@6.0.33 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2014-0033
|
Low: Session fixation | There are no reported fixed by versions. |
|
CVE-2011-3375
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2011-3190
|
Important: Authentication bypass and information disclosure | There are no reported fixed by versions. |
|
CVE-2012-0022
|
Important: Denial of service | There are no reported fixed by versions. |
|
GHSA-6gjj-c5mj-4cvp
Aliases: CVE-2014-0033 |
Improper Input Validation in Apache Tomcat org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting when … | There are no reported fixed by versions. |
|
GHSA-rp8h-vr48-4j8p
Aliases: CVE-2011-3375 |
Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does … | There are no reported fixed by versions. |
|
GHSA-c38m-v4m2-524v
Aliases: CVE-2011-3190 |
Apache Tomcat Allows Remote Attackers to Spoof AJP Requests Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2011-1184
|
Moderate: Multiple weaknesses in HTTP DIGEST authentication | |
|
CVE-2011-2204
|
Low: Information disclosure | |
|
CVE-2011-2526
|
Low: Information disclosure | |
|
CVE-2011-2729
|
Important: Information disclosure | |
|
GHSA-9ggm-7897-x4mg
|
Improper Input Validation in Apache Tomcat Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile … |
CVE-2011-2526
|
|
GHSA-hffm-fqv4-w27r
|
Improper Authentication in Apache Tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, … |
CVE-2011-5063
|
|
GHSA-c57p-3v2g-w9rg
|
Insertion of Sensitive Information into Log File in Apache Tomcat Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x … |
CVE-2011-2204
|
|
GHSA-q9xf-jwr4-v445
|
Authentication Bypass in Apache Tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, … |
CVE-2011-1184
|
|
GHSA-6cr4-7c7p-p3xv
|
Use of Hard-coded Cryptographic Key in Apache Tomcat DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x … |
CVE-2011-5064
|
|
GHSA-4f7h-9j2x-cmr4
|
Improper Authentication in Apache Tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, … |
CVE-2011-5062
|