Skip to content
OpenAdvisories

Archive

March 2011

Vulnerabilities first published in this month (UTC), newest first.

  1. 134
  2. 216
  3. 362
  4. 42
  5. 5 
  6. 6 
  7. 77
  8. 819
  9. 96
  10. 104
  11. 1142
  12. 12 
  13. 13 
  14. 147
  15. 1511
  16. 1614
  17. 17 
  18. 1825
  19. 19 
  20. 2015
  21. 21 
  22. 2216
  23. 2328
  24. 24 
  25. 2510
  26. 26 
  27. 27 
  28. 2811
  29. 298
  30. 309
  31. 319

2 results · Clear filters · Feed

  • Medium —

    Apache Tomcat does not follow ServletSecurity annotations

    Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application. NOTE: this vulnerability exist…

  • Medium —

    Apache Tomcat allows remote attackers to bypass intended access restrictions

    Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.