PkgSeer

Vulnerabilities

Last updated 30 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
org.apache.tomcat:tomcat Apache Tomcat's rewrite valve has an Always-Incorrect Control Flow Implementation vulnerability High Risk 7.3 4 months ago 4 hours ago
org.apache.tomcat:tomcat-catalina Apache Tomcat's rewrite valve has an Always-Incorrect Control Flow Implementation vulnerability High Risk 7.3 4 months ago 4 hours ago
org.apache.tomcat:tomcat Apache Tomcat has a Cross-site Scripting vulnerability Medium Risk 6.1 4 months ago 4 hours ago
org.apache.tomcat:tomcat Apache Tomcat has an Always-Incorrect Control Flow Implementation vulnerability Critical 9.1 4 months ago 5 hours ago
org.apache.tomcat:tomcat-util-scan Apache Tomcat has an Always-Incorrect Control Flow Implementation vulnerability Critical 9.1 4 months ago 5 hours ago
org.apache.tomcat:tomcat Apache Tomcat has an Improper Authentication vulnerability Medium Risk 6.5 4 months ago 5 hours ago
org.apache.tomcat:tomcat-tribes Apache Tomcat has an Improper Authentication vulnerability Medium Risk 6.5 4 months ago 5 hours ago
org.apache.tomcat:tomcat Apache Tomcat has an Improper Authorization vulnerability Medium Risk 6.5 4 months ago 5 hours ago
org.apache.tomcat:tomcat-catalina Apache Tomcat has an Improper Authorization vulnerability Medium Risk 6.5 4 months ago 5 hours ago
org.apache.tomcat:tomcat Apache Tomcat has a Missing Critical Step in Authentication vulnerability High Risk 7.3 4 months ago 5 hours ago
org.apache.tomcat:tomcat-catalina Apache Tomcat has a Missing Critical Step in Authentication vulnerability High Risk 7.3 4 months ago 5 hours ago
org.apache.tomcat:tomcat-coyote Apache Tomcat has an Improper Input Validation vulnerability High Risk 7.5 8 months ago 18 hours ago
org.apache.tomcat:tomcat-coyote-ffm Apache Tomcat has an Improper Input Validation vulnerability High Risk 7.5 8 months ago 18 hours ago
org.apache.tomcat:tomcat-coyote Apache Tomcat - HTTP/2 no-authority bypass of strict SNI validation Critical 9.8 2 months ago 8 days ago
org.apache.tomcat:tomcat-util Apache Tomcat util accepted misconfigured CRLs Critical 9.1 4 months ago 11 days ago
org.apache.tomcat:tomcat-catalina Apache Tomcat Improper Input Validation vulnerability High Risk 7.5 2 years ago 1 month ago
org.apache.tomcat:tomcat-coyote Apache Tomcat Improper Input Validation vulnerability High Risk 7.5 2 years ago 1 month ago
org.apache.tomcat:tomcat-coyote Apache Tomcat - Security constraint bypass with HTTP/0.9 Low Risk 3.0 8 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability Critical 9.8 2 months ago 1 month ago
org.apache.tomcat:tomcat-catalina Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability Critical 9.8 2 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat vulnerable to Insertion of Sensitive Information into Log File High Risk 7.5 6 months ago 1 month ago
org.apache.tomcat:tomcat-tribes Apache Tomcat vulnerable to Insertion of Sensitive Information into Log File High Risk 7.5 6 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat - Client certificate verification bypass Critical 9.1 8 months ago 1 month ago
org.apache.tomcat:tomcat-coyote Apache Tomcat - Client certificate verification bypass Critical 9.1 8 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve High Risk 7.5 6 months ago 1 month ago
org.apache.tomcat:tomcat-catalina Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve High Risk 7.5 6 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability Critical 9.1 2 months ago 1 month ago
org.apache.tomcat:tomcat-catalina Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability Critical 9.1 2 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability Critical 9.1 2 months ago 1 month ago
org.apache.tomcat:tomcat-catalina Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability Critical 9.1 2 months ago 1 month ago
org.apache.tomcat:tomcat-coyote Apache Tomcat has an HTTP Request/Response Smuggling vulnerability High Risk 7.5 6 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling High Risk 7.5 5 months ago 1 month ago
org.apache.tomcat:tomcat-catalina Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling High Risk 7.5 5 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat has an Open Redirect vulnerability Medium Risk 6.1 6 months ago 1 month ago
org.apache.tomcat:tomcat-catalina Apache Tomcat has an Open Redirect vulnerability Medium Risk 6.1 6 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat - AJP secret compared in non-constant time Low Risk 3.7 5 months ago 1 month ago
org.apache.tomcat:tomcat-catalina Apache Tomcat - AJP secret compared in non-constant time Low Risk 3.7 5 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat: LockOutRealm treats user names as case-sensitive High Risk 7.5 5 months ago 1 month ago
org.apache.tomcat:tomcat-catalina Apache Tomcat: LockOutRealm treats user names as case-sensitive High Risk 7.5 5 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat - Digest authenticator will authenticate any unknown user Critical 9.8 5 months ago 1 month ago
org.apache.tomcat:tomcat-catalina Apache Tomcat - Digest authenticator will authenticate any unknown user Critical 9.8 5 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat - Security constraints not correctly applied Critical 9.1 5 months ago 1 month ago
org.apache.tomcat:tomcat-catalina Apache Tomcat - Security constraints not correctly applied Critical 9.1 5 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat - WebSocket authentication header exposure High Risk 7.3 5 months ago 1 month ago
org.apache.tomcat:tomcat-catalina Apache Tomcat - WebSocket authentication header exposure High Risk 7.3 5 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat: Padding Oracle vulnerability in EncryptInterceptor High Risk 7.5 6 months ago 1 month ago
org.apache.tomcat:tomcat-tribes Apache Tomcat: Padding Oracle vulnerability in EncryptInterceptor High Risk 7.5 6 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat has an Improper Input Validation vulnerability Medium Risk 5.3 6 months ago 1 month ago
org.apache.tomcat:tomcat-coyote Apache Tomcat has an Improper Input Validation vulnerability Medium Risk 5.3 6 months ago 1 month ago
org.apache.tomcat:tomcat Apache Tomcat: CLIENT_CERT authentication does not fail as expected Critical 9.1 6 months ago 1 month ago
Data courtesy of OSV.dev
Page 1