Known vulnerabilities in tomcat-javadoc - page 4

Known vulnerabilities in tomcat-javadoc - page 4

Vendor: SUSE

Software: tomcat-javadoc

Software CPE: cpe:2.3:o:suse:tomcat-javadoc:*:*:*:*:*:suse_linux:*:*

Website: https://www.suse.com/

Total vulnerabilities: 77

Public exploits: 12

Known exploited (KEV): 2

Breakdown by Severity Chart

Vulnerabilities (77)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-46589	CWE-444	Medium	No	No	9.0.36-3.118.1, 9.0.85-150200.57.1	28.11.2023	SB2023112846 SB2023121851 SB2023122831 and 78 more
#VU81803 - Exposed Dangerous Method or Function CVE-2023-42794	CWE-749	Medium	No	No	9.0.85-150200.57.1	10.10.2023	SB2023101084 SB2023101286 SB2023111528 and 22 more
#VU81800 - Resource Management Errors CVE-2023-42795	CWE-399	Medium	No	No	9.0.36-3.111.1, 9.0.85-150200.57.1	10.10.2023	SB2023101084 SB2023101122 SB2023101123 and 47 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-45648	CWE-444	Medium	No	No	9.0.36-3.111.1, 9.0.85-150200.57.1	10.10.2023	SB2023101084 SB2023101122 SB2023101123 and 47 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-41080	CWE-601	Medium	Available	No	9.0.36-3.108.1	29.08.2023	SB2023082924 SB2023100565 SB2023101122 and 51 more
#VU76417 - Allocation of Resources Without Limits or Throttling CVE-2023-28709	CWE-770	Medium	No	No	8.0.53-29.66.1, 9.0.36-3.105.1, 9.0.75-150200.41.1	22.05.2023	SB2023052235 SB2023053003 SB2023053052 and 35 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute CVE-2023-28708	CWE-614	Low	No	No	9.0.36-3.102.1, 9.0.43-150200.35.1	22.03.2023	SB2023032237 SB2023032939 SB2023032945 and 53 more
#VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998	CWE-770	Medium	Available	No	8.0.53-29.63.1, 8.0.53-29.66.1, 9.0.36-3.99.1, 9.0.36-3.105.1, 9.0.43-150200.35.1, 9.0.75-150200.41.1	20.02.2023	SB2023022046 SB2023022047 SB2023030917 and 203 more
#VU70666 - Improper Control of Generation of Code ('Code Injection') CVE-2022-45143	CWE-94	Medium	No	No	9.0.43-150200.38.1	03.01.2023	SB2023010329 SB2023012516 SB2023012606 and 34 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-42252	CWE-444	Medium	No	No	8.0.53-29.57.1, 9.0.36-3.93.1	31.10.2022	SB2022103146 SB2022112324 SB2022112533 and 43 more
#VU67714 - Exposure of sensitive information to an unauthorized actor CVE-2021-43980	CWE-200	Low	No	No	9.0.36-3.90.1	28.09.2022	SB2022092818 SB2022103001 SB2022111642 and 20 more
#VU56634 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-41079	CWE-835	Medium	No	No	9.0.36-3.71.1	15.09.2021	SB2021091527 SB2021100721 SB2021101512 and 16 more
#VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-33037	CWE-444	Medium	No	No	9.0.36-3.71.1	29.07.2021	SB2021072907 SB2021080807 SB2021080808 and 30 more
#VU55417 - Improper Authentication CVE-2021-30640	CWE-287	Medium	No	No	9.0.36-3.71.1	29.07.2021	SB2021072901 SB2021072902 SB2021081231 and 14 more
#VU51014 - Resource Management Errors CVE-2021-25122	CWE-399	Medium	No	No	9.0.36-3.64.1	01.03.2021	SB2021030115 SB2021031619 SB2021032519 and 23 more
#VU51012 - Deserialization of Untrusted Data CVE-2021-25329	CWE-502	Medium	No	No	8.0.53-29.46.1, 9.0.36-3.64.1	01.03.2021	SB2021030115 SB2021031620 SB2021040723 and 16 more
#VU28158 - Deserialization of Untrusted Data CVE-2020-9484	CWE-502	High	Available	No	8.0.53-29.46.1, 9.0.36-3.64.1	21.05.2020	SB2020052124 SB2020052501 SB2020053102 and 47 more

Showing elements 61 - 80 out of 77