Skip to content
OpenAdvisories

Archive

12 February 2008

Vulnerabilities first published on this day (UTC), newest first.

← January 2008 2008 / February /12 March 2008 →
  1. 119
  2. 2 
  3. 3 
  4. 415
  5. 533
  6. 634
  7. 717
  8. 820
  9. 92
  10. 10 
  11. 114
  12. 1291
  13. 1356
  14. 1410
  15. 1525
  16. 16 
  17. 17 
  18. 187
  19. 1925
  20. 2016
  21. 2140
  22. 2229
  23. 23 
  24. 24 
  25. 2525
  26. 266
  27. 2719
  28. 2823
  29. 2917
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2008-0002

    Apache Tomcat Sensitive Information Disclosure

    Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this …

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2007-6286

    Apache Tomcat Does Not Properly Handle Empty Requests

    Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent request…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2007-5333 Public exploit EPSS 63%

    Exposure of Sensitive Information in Apache Tomcat

    Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs…

    org.apache.tomcat:tomcat Maven