Lucene search
+L

16569 matches found

Tenable Nessus
Tenable Nessus
•added 2025/10/27 12:00 a.m.•21 views

Apache Tomcat 11.0.0.M1 < 11.0.11 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 11.0.11. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat11.0.11security-11 advisory. - Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regressi...

9.6CVSS8AI score0.64413EPSS
SaveExploits4References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•6 views

CVE-2025-55754: Improper Neutralization of Escape, Meta, or Control Sequences

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an...

9.6CVSS7.7AI score0.10173EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•13 views

Apache Tomcat security vulnerabilities

Apache Tomcat is a lightweight Web application server from the American Apache Apache Foundation. It is used to implement support for Servlets and JavaServer Page JSP. A security vulnerability exists in Apache Tomcat that stems from not properly escaping ANSI escape sequences, which could lead to...

9.6CVSS7.9AI score0.10173EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/10/25 10:18 a.m.•21 views

CVE-2025-5605

An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain restricted resources, resulting in partial information disclosure. The known...

5.3CVSS5.9AI score0.0085EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/24 3:40 p.m.•16 views

CVE-2025-12114

Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

5.5CVSS5.6AI score0.00106EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/24 12:30 p.m.•25 views

EUVD-2025-35828

An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain restricted resources, resulting in partial information disclosure. The known...

4.3CVSS5.9AI score0.0085EPSS
SaveExploits1References2
NVD
NVD
•added 2025/10/24 10:15 a.m.•30 views

CVE-2025-5605

An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain restricted resources, resulting in partial information disclosure. The known...

5.3CVSS0.0085EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/10/24 10:15 a.m.•18 views

CVE-2025-5605

An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain restricted resources, resulting in partial information disclosure. The known...

5.3CVSS6.6AI score0.0085EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/10/24 10:09 a.m.•32 views

CVE-2025-5605 Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure

An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain restricted resources, resulting in partial information disclosure. The known...

4.3CVSS0.0085EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/10/24 10:09 a.m.•20 views

CVE-2025-5605 Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure

An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain restricted resources, resulting in partial information disclosure. The known...

4.3CVSS5.9AI score0.0085EPSS
SaveExploits1References1
CVE
CVE
•added 2025/10/24 10:09 a.m.•67 views

CVE-2025-5605

CVE-2025-5605 describes an authentication bypass in the Management Console of multiple WSO2 products. A malicious actor who has console access can manipulate the request URI to bypass authentication and access restricted resources, resulting in partial information disclosure. The known exposure i...

5.3CVSS5.9AI score0.0085EPSS
SaveIn wildExploits1References1Affected Software9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/24 12:00 a.m.•9 views

CVE-2025-5605: Authentication Bypass by Spoofing

An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain restricted resources, resulting in partial information disclosure. The known...

5.3CVSS5.9AI score0.0085EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/24 12:00 a.m.•33 views

PT-2025-43610

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description An authentication bypass exists in the Management Console of WSO2 products. An attacker with access to the console can modify the request URI to circumvent authentication and access...

5.3CVSS5.8AI score0.0085EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/23 6:31 p.m.•17 views

EUVD-2025-35698

Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

5.2CVSS5.6AI score0.00106EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/10/23 4:15 p.m.•18 views

CVE-2025-12114

Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

5.5CVSS5.6AI score0.00106EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/23 4:15 p.m.•17 views

CVE-2025-12114

Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

5.5CVSS0.00106EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/10/23 3:37 p.m.•15 views

Security Bulletin: IBM MQ is affected by a denial of service vulnerability in IBM WebSphere Application Server Liberty (CVE-2025-48976)

Summary IBM WebSphere Application Server Liberty is used by IBM MQ as part of the IBM MQ Console and IBM MQ REST API functionality CVE-2025-48976 Vulnerability Details CVEID:CVE-2025-48976 DESCRIPTION: Allocation of resources for multipart headers with insufficient limits enabled a DoS...

7.5CVSS6.9AI score0.32964EPSS
SaveExploits1Affected Software1
Cvelist
Cvelist
•added 2025/10/23 3:29 p.m.•28 views

CVE-2025-12114 Serial Console Enabled

Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

5.2CVSS0.00106EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/23 3:29 p.m.•35 views

CVE-2025-12114

CVE-2025-12114 affects Azure Access Technology’s BLU-IC2 and BLU-IC4 networked access controllers. The issue arises when the serial console is enabled, enabling potential information disclosure that could help an attacker identify vulnerabilities. Affected versions are BLU-IC2 and BLU-IC4 up to 1...

5.5CVSS5.6AI score0.00106EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/23 3:29 p.m.•7 views

CVE-2025-12114 Serial Console Enabled

Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

5.2CVSS5.6AI score0.00106EPSS
SaveExploits0References1
Rows per page
Query Builder