31 matches found
Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core (CVE-2026-41284,CVE-2026-42498,CVE-2026-43514,CVE-2026-24880, CVE-2026-34483,CVE-2026-34487,CVE-2026-34500)
Summary IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core CVE-2026-41284,CVE-2026-42498,CVE-2026-43514,CVE-2026-24880, CVE-2026-34483,CVE-2026-34487,CVE-2026-34500 Vulnerability Details CVEID:CVE-2026-41284 DESCRIPTION: Allocation of Resources Without Limits or...
ROOT-APP-MAVEN-CVE-2026-34500 CVE-2026-34500 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-34500 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Authentication, Insertion of Sensitive Information into Log File, Improper Encoding or Escaping of Output (CVE-2026-34500, CVE-2026-34487, CVE-2026-34483)
Summary There are vulnerabilities in tomcat-embed-core-10.1.52.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-34500, CVE-2026-34487, CVE-2026-34483. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-34483 DESCRIPTION: Improper Encoding or Escaping...
CVE-2026-34500 vulnerabilities
Vulnerabilities for packages: thingsboard...
Security update for tomcat
This update for tomcat fixes the following issues: Security fixes: CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. CVE-2026-25854: Occasionally open redirect bsc1261851. CVE-2026-29129: TLS cipher order is not preserved bsc1261852. CVE-2026-29145: OCSP checks sometimes...
Security update for tomcat10
This update for tomcat10 fixes the following issues: Security fixes: CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. CVE-2026-25854: Occasionally open redirect bsc1261851. CVE-2026-29129: TLS cipher order is not preserved bsc1261852. CVE-2026-29145: OCSP checks sometimes...
Security update for tomcat
This update for tomcat fixes the following issues: Security fixes: CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. CVE-2026-25854: Occasionally open redirect bsc1261851. CVE-2026-29129: TLS cipher order is not preserved bsc1261852. CVE-2026-29145: OCSP checks sometimes...
SUSE-SU-2026:1572-1 Security update for tomcat
This update for tomcat fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OCSP checks...
Security update for tomcat10 (important)
openSUSE security update: security update for tomcat10 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20612-1 Rating: important References: bsc1258371 bsc1261850 bsc1261851 bsc1261852 bsc1261853 bsc1261854 bsc1261855 bsc1261856 bsc1261857...
OPENSUSE-SU-2026:20595-1 Security update for tomcat11
This update for tomcat11 fixes the following issues: - Update to Tomcat 11.0.21 - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OC...
Apache Tomcat 11.0.0.M14 < 11.0.21 multiple vulnerabilities
The version of Tomcat installed on the remote host is prior to 11.0.21. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat11.0.21security-11 advisory. - Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clusteri...
tomcat11-11.0.21-1.1 on GA media (moderate)
tomcat11-11.0.21-1.1 on GA media Announcement ID: openSUSE-SU-2026:10549-1 Rating: moderate Cross-References: CVE-2026-24880 CVE-2026-25854 CVE-2026-29129 CVE-2026-29145 CVE-2026-29146 CVE-2026-32990 CVE-2026-34483 CVE-2026-34486 CVE-2026-34487 CVE-2026-34500 CVSS scores: CVE-2026-24880 SUSE : 4....
CVE-2026-34500 vulnerabilities
Vulnerabilities for packages: nacos, camunda, thingsboard, ontop-fips, nacos-docker, kayenta-fips, ontop, camunda-zeebe, kayenta...
CVE-2026-34500
creationtimestamp| type| source ---|---|--- 2026-04-09 23:43:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj3yf6hqm226 2026-04-10 00:22:52+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mj42l3ynn223 2026-04-10 12:50:14+00:00| seen|...
CVE-2026-34500
CLIENTCERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.20, from 10.1.22 through 10.1.53, from 9.0.92 through 9.0.116. Users are recommended to upgrade to...
com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.3.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +32 more potentially affected by CVE-2026-34500 via org.apache.tomcat:tomcat-coyote (>=11.0.0-m14, <=11.0.20)
org.apache.tomcat:tomcat-coyote MAVEN version =11.0.0-m14, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.0, =1.0.1 and more Source cves: CVE-2026-34500 Source advisory: MEND:CVE-2026-34500...
ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0), ai.platon.pulsar:pulsar-it-tests (>=4.5.0, <=4.7.4) +1197 more potentially affected by CVE-2026-34500 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m14, <=11.0.20)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m14, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.7.5 and more Source cves: CVE-2026-34500 Source advisory: MEND:CVE-2026-34500...
CVE-2025-34500
creationtimestamp| type| source ---|---|--- 2025-10-25 03:01:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3yflp2dl32e...
