Skip to content
OpenAdvisories

Archive

June 2009

Vulnerabilities first published in this month (UTC), newest first.

← May 2009 2009 / June July 2009 →
  1. 120
  2. 216
  3. 313
  4. 417
  5. 525
  6. 612
  7. 7 
  8. 815
  9. 919
  10. 1066
  11. 1121
  12. 1224
  13. 13 
  14. 14 
  15. 1517
  16. 1618
  17. 1713
  18. 1814
  19. 1925
  20. 20 
  21. 21 
  22. 2231
  23. 2318
  24. 2412
  25. 2513
  26. 2617
  27. 2715
  28. 28 
  29. 29 
  30. 309
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2008-5515 EPSS 19%

    Directory Traversal in Apache Tomcat

    Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass int…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2009-0033 EPSS 10%

    Apache Tomcat Denial of Service via Malformed Request Headers

    Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid he…

    org.apache.tomcat:tomcat Maven
  • Medium 4.2
    CVE-2009-0783

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

    Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2009-0580 Public exploit EPSS 94%

    Exposure of Sensitive Information in Apache Tomcat

    Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to i…

    org.apache.tomcat:tomcat Maven