Skip to content
OpenAdvisories

Archive

September 2004

Vulnerabilities first published in this month (UTC), newest first.

← August 2004 2004 / September October 2004 →
  1. 1480
  2. 27
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 108
  11. 11 
  12. 12 
  13. 13 
  14. 1414
  15. 15 
  16. 16 
  17. 1713
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2437
  25. 25 
  26. 26 
  27. 27 
  28. 284
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2002-1148 Public exploit EPSS 19%

    Apache Tomcat Source Code Disclosure

    The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet.

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2003-0045

    Jakarta Tomcat Denial of Service vulnerability

    Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp.

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2003-0043

    Tomcat uses trusted privileges when processing web.xml file

    Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.

    org.apache.tomcat:tomcat Maven