NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
2  CVE-2008-0002  Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.    2  5.8  Medium  2017-01-03  2014-03-15  View
55537  CVE-2007-3385  Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the " character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.    2  4.3  Medium  2017-01-07  2011-04-20  View
55534  CVE-2007-3382  Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes (""") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks.    2  4.3  Medium  2017-01-07  2011-03-07  View
10027  CVE-2011-3375  Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data.    2  5  Medium  2017-01-07  2012-02-15  View
45134  CVE-2012-3544  Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.    2  5  Medium  2017-01-19  2014-12-11  View

Page 1294 of 17672, showing 5 records out of 88360 total, starting on record 6466, ending on 6470

<<first 1290 | 1291 | 1292 | 1293 | 1294 | 1295 | 1296 | 1297 | 1298 last>>

Actions