606135 matches found
CVE-2026-65183
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...
DEBIAN-CVE-2026-65183
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...
CVE-2026-65182
Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...
DEBIAN-CVE-2026-65182
Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...
CVE-2026-38474
GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 suffers from a Broken access control vulnerability in the IP lock manager, which allows remote authenticated users to add, modify, or delete IP lock entries for arbitrary accounts via tools.php?action=iplock...
CVE-2026-38470
A Broken access control vulnerability in the API user endpoint in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows unprivileged, authenticated users to enable or disable arbitrary user accounts via the req=disable or req=enable action using a normal user-created...
Sudo-Chroot
Descrizione: Sudo prima della versione 1.9.17p1 consente agli utenti locali di ottenere accesso root perché /etc/nsswitch.conf da una directory controllata dall'utente viene utilizzato con l'opzione --chroot. Escalation dei Privilegi Locali tramite sudo-chroot -R...
CVE-2025-66956
CVE-2025-66956 Eine unsichere Zugriffskontrolle in den Komponenten Contact Plan, E-Mail, SMS und Fax in Asseco SEE Live 2.0 ermöglicht Remote-Angreifern, über eine berechenbare URL auf Anhänge zuzugreifen und diese auszuführen. CVSS-Vektoren CVSS 3.1: 9.8,...
-CVE-2019-14287-SUDO-bypass-vulnerability
Dieses Repository hat keine README-Datei...
CVE-2026-68525
An Incorrect Authorization flaw in Apache Tomcat 's FORM authentication process allows bypassing a security constraint that limits a user to POST access while denying GET . A redirect after successful FORM authentication can cause the constraint check to evaluate the wrong HTTP method, granting a...
CVE-2026-65927
An off-by-one error in the RewriteValve of Apache Tomcat affecting the [N] flag causes rewrite processing to restart at the second rule rather than the first, which may bypass access control . Affected versions include 11.0.0-M1 through 11.0.24 , 10.1.0-M1 through 10.1.57 , 9.0.0-M1 through 9.0.1...
CVE-2026-65927 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control
Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...
CVE-2026-65927 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control
Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...
CVE-2026-65183 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...
CVE-2026-65183
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...
CVE-2026-65183 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...
CVE-2026-65183
Apache Tomcat is affected by a TOCTOU race condition when creating Unix Domain Sockets, allowing an unauthorised local user to access the socket. The Tomcat security team rates this as Low severity, though the CNA-assigned CVSS 3.1 score is 8.1 (HIGH) . Affected versions: 11.0.0-M1 through 11.0.2...
CVE-2026-65182 Apache Tomcat: Bypass longest prefix security constraint
Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...
CVE-2026-65182
Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...
CVE-2026-65182
Apache Tomcat is vulnerable to a security constraint bypass (CVE-2026-65182) caused by improper access control in constraint processing: if a constraint for a longer path is declared before a more restrictive constraint for a shorter sub-path, the more restrictive rule is effectively bypassed. Th...