Archive
19 January 2012
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Medium —
Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests
Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in…
-
Medium —CVE-2012-0022 EPSS 10%
Denial of Service in Apache Tomcat
Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and para…