1463513 matches found
tomcat: Apache Tomcat: Improper Authorization Allows Security Constraint Bypass
A flaw was found in Apache Tomcat where access control rules for the default servlet are improperly handled. An attacker can exploit this issue to bypass specific HTTP method restrictions, potentially gaining unauthorized access to protected application resources...
tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve
A flaw was found in Apache Tomcat. This vulnerability, located in the rewrite valve, is due to improper handling of URL encoding hex encoding. A remote attacker could exploit this to bypass security constraints in certain configurations, potentially gaining unauthorized access or performing actio...
Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix
A flaw was found in Apache Tomcat. This improper input validation vulnerability stems from an incomplete fix for a previous security issue CVE-2025-66614. This flaw may allow an attacker to bypass security controls or cause unexpected behavior within the application...
tomcat: Apache Tomcat: Security constraint bypass for CGI scripts
A flaw was found in the CGI servlet component of Apache Tomcat. This vulnerability allows a security constraint bypass via improper handling of case sensitivity in the pathInfo component of a URI mapped to the CGI servlet...
Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix
A flaw was found in Apache Tomcat. This improper input validation vulnerability stems from an incomplete fix for a previous security issue CVE-2025-66614. This flaw may allow an attacker to bypass security controls or cause unexpected behavior within the application...
tomcat-coyote: tomcat: Improper Authorization allows security bypass
In Apache Tomcat, when multiple security constraints defined an HTTP method constraint for the same extension pattern, only the first method constraint was applied. A remote attacker could exploit this to bypass intended security restrictions for information or actions within the application...
CVE-2026-90699
creationtimestamp| type| source ---|---|--- 2026-09-14 05:03:21+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117267640180714498 2026-09-14 09:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhqokpvdh2j 2026-09-14 10:21:16+00:00| seen|...
CVE-2026-90682
A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAGGPSLAT/TAGGPSLONG leads to heap-based buffer overflow. An attack has to be...
Important: Red Hat Security Advisory: grafana-pcp security update
An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
Important: Red Hat Security Advisory: delve security update
An update for delve is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2026-38924
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a...
CVE-2026-22706
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:15+00:00| seen| Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4 2026-09-15 00:00:21+00:00| published-proof-of-concept| Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4...
CVE-2026-14962
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:13+00:00| seen| Telegram/cfwIjD0BfTttpxj-RZnmg61xri6aKpaW-Ttu0tih2neg1Gg 2026-09-14 03:00:13+00:00| seen| Telegram/SISeOiJWiDHPKa0-EGjfIE-tIZnqvMDmbIqcTRDP3O63UA 2026-09-15 00:00:22+00:00| published-proof-of-concept|...
CVE-2017-0541
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:12+00:00| seen| Telegram/EPpfD-gVy8aS6WjPAMTAUlj2EpWx-6D3lqr7cSnTTsweZ3U 2026-09-15 00:00:23+00:00| published-proof-of-concept| Telegram/EPpfD-gVy8aS6WjPAMTAUlj2EpWx-6D3lqr7cSnTTsweZ3U...
CVE-2020-25749
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:11+00:00| seen| Telegram/SWXpTbFDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM 2026-09-15 00:00:24+00:00| published-proof-of-concept| Telegram/SWXpTbFDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM...
CVE-2021-43858
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:06+00:00| seen| Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YOLawI6LgE5lPyRWI 2026-09-15 00:00:31+00:00| published-proof-of-concept| Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YOLawI6LgE5lPyRWI...
CVE-2018-16987
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:05+00:00| seen| Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YOLawI6LgE5lPyRWI 2026-09-15 00:00:31+00:00| published-proof-of-concept| Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YOLawI6LgE5lPyRWI...
CVE-2023-43344
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:05+00:00| seen| Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YOLawI6LgE5lPyRWI 2026-09-15 00:00:31+00:00| published-proof-of-concept| Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YOLawI6LgE5lPyRWI...
