| 2024-02-01 | Apache Tomcat 8.5.63 / 9.0.43 HTTP Response Smuggling | Published |
| 2023-02-06 | Apache Tomcat On Ubuntu Log Init Privilege Escalation | Published |
| 2020-11-21 | Apache Tomcat AJP Ghostcat File Read/Inclusion Metasploit | Published |
| 2020-02-28 | Apache Tomcat AJP Ghostcat File Read / Inclusion | Published |
| 2019-07-05 | Apache Tomcat CGIServlet enableCmdLineArguments Remote Code Execution Metasploit | Published |
| 2017-10-11 | Apache Tomcat Upload Bypass / Remote Code Execution | Published |
| 2017-10-05 | Apache Tomcat JSP Upload Bypass / Remote Code Execution | Published |
| 2017-04-11 | Apache Tomcat 8.x / 9.x Refactoring Information Disclosure | Published |
| 2017-04-06 | Apache Tomcat Directory/Path Traversal | Published |
| 2017-04-04 | Apache Tomcat 6/7/8/9 - Information Disclosure | Published |
| 2016-10-12 | Apache Tomcat JK ISAPI Connector 1.2.41 Buffer Overflow | Published |
| 2016-02-23 | Apache Tomcat 9.0.0.M1 Security Manager Persistence Bypass | Published |
| 2016-02-23 | Apache Tomcat 8.0.26 Limited Directory Traversal | Published |
| 2016-02-23 | Apache Tomcat 9.0.0.M1 Security Manager StatusManagerServlet Bypass | Published |
| 2016-02-23 | Apache Tomcat 9.0.0.M2 CSRF Token Leak | Published |
| 2015-05-06 | Apache Tomcat Connection Swallow Denial Of Service | Published |
| 2014-09-11 | Apache Tomcat 7.0.39 Remote Code Execution | Published |
| 2014-06-02 | Apache Tomcat 8.0.3 denial of service by using a Content-Length 0 | Published |
| 2014-05-30 | Apache Tomcat XML Parser Information Disclosure | Published |
| 2014-05-30 | Apache Tomcat XSLT Information Disclosure | Published |
| 2014-02-26 | Apache Tomcat Denial Of Service | Published |
| 2014-02-26 | Apache Tomcat Information Disclosure Via XXE | Published |
| 2014-02-13 | Apache Commons FileUpload and Apache Tomcat DoS Exploit | Published |
| 2014-02-06 | Apache Commons FileUpload and Apache Tomcat DoS | Published |
| 2014-02-04 | Apache Tomcat Manager Code Execution | Published |
| 2013-10-05 | Apache Tomcat/JBoss Remote Code Execution | Published |
| 2013-05-11 | Apache Tomcat 7.0.29 / 6.0.36 Denial Of Service | Published |
| 2013-05-11 | Apache Tomcat 7.0.39 Request mix-up if AsyncListener method throws RuntimeException | Published |
| 2012-12-05 | Apache Tomcat CSRF Prevention Filter Bypass | Published |
| 2012-11-06 | Apache Tomcat 6.x / 7.x Denial Of Service | Published |
| 2012-11-06 | Apache Tomcat 5.x / 6.x / 7.x DIGEST Authentication Weaknesses | Published |
| 2012-03-20 | Apache Tomcat Remote Exploit PUT request and Account Scanner | Published |
| 2011-09-02 | Apache Tomcat Authentication bypass and information disclosure | Published |