Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 213
Reset filtersApache Tomcat Vulnerable to Improper Resource Shutdown or Release
Apache Tomcat Session Fixation vulnerability
Apache Tomcat Improper Resource Shutdown or Release vulnerability
Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams
Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector
Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits
Apache Tomcat - Security constraint bypass for pre/post-resources
Apache Tomcat - DoS in multipart upload
Apache Tomcat installer for Windows has an untrusted search path vulnerability
Apache Tomcat - CGI security constraint bypass
Apache Tomcat Denial of Service via invalid HTTP priority header
Apache Tomcat Rewrite rule bypass
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
Apache Tomcat Uncontrolled Resource Consumption vulnerability
Apache Tomcat - XSS in generated JSPs
Apache Tomcat - Authentication Bypass
Apache Tomcat Request and/or response mix-up
Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability
Apache Tomcat - Denial of Service
Denial of Service via incomplete cleanup vulnerability in Apache Tomcat
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.