Most recent entries from all

certfr-2014-avi-244 — De multiples vulnérabilités ont été corrigées dans Oracle Solaris. Certaines d'entre elles…

certfr-2014-avi-244

EUVD-2026-107358

fkie_cve-2013-4286

Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a "Transfer-Encoding: chunked" header. NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090.

GHSA-j448-j653-r3vj — Apache Tomcat is vulnerable to HTTP request-smuggling

Affected: Maven: org.apache.tomcat:tomcat

gsd-2013-4286

RHSA-2014:0343 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.2 update

tomcat: multiple content-length header poisoning flaws PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application 6: JSM policy not respected by deployed applications

RHSA-2014:0686 — Red Hat Security Advisory: tomcat security update

tomcat: multiple content-length header poisoning flaws tomcat: incomplete fix for CVE-2012-3544 tomcat7: RHEL-7 regression causing DoS

Withdrawn: UBUNTU-CVE-2013-4286

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7

WID-SEC-W-2023-0754 — Apache Tomcat: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um einen Denial of Service Zustand herbeizuführen.