org.apache.tomcat:tomcat-catalina-ha (8.0.20), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.20) +2 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.0.20)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.20 - org.apache.tomcat:tomcat-catalina-jmx-remote...

com.addc:addc-svr-tomcat (2.5), org.apache.ode:ode-tomee (1.3.8) +5 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.28)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.addc:addc-svr-tomcat 2.5 - org.apache.ode:ode-tomee 1.3.8 -...

org.apache.tomcat:tomcat-catalina-ha (8.0.20), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.20) +2 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.0.20)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.20 - org.apache.tomcat:tomcat-catalina-jmx-remote...

com.spatineo:geoserver-tomcat8-valve (1.0), org.apache.tomcat:tomcat-catalina-ha (8.5.46) +10 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.46)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.spatineo:geoserver-tomcat8-valve 1.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.46 -...

org.apache.tomcat:tomcat-catalina-ha (8.0.20), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.20) +2 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.0.20)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.20 - org.apache.tomcat:tomcat-catalina-jmx-remote...

org.apache.tomcat:tomcat-catalina-ha (8.0.20), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.20) +2 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.0.20)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.20 - org.apache.tomcat:tomcat-catalina-jmx-remote...

org.apache.tomcat:tomcat-catalina-ha (8.0.20), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.20) +2 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.0.20)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.20 - org.apache.tomcat:tomcat-catalina-jmx-remote...

org.apache.tomcat:tomcat-catalina-ha (8.0.20), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.20) +2 more potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat-catalina (8.0.20)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.20 - org.apache.tomcat:tomcat-catalina-jmx-remote...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following via the WebDAV backend process. An attacker can access and modify files outside the intended directory by exploiting symbolic links that point outside the designated root. This is only exploitable if...

com.spatineo:geoserver-tomcat8-valve (1.0), org.apache.tomcat:tomcat-catalina (8.5.46) +11 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (8.5.46)

org.apache.tomcat:tomcat-coyote MAVEN version 8.5.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - com.spatineo:geoserver-tomcat8-valve 1.0 - org.apache.tomcat:tomcat-catalina 8.5.46 -...

com.github.dblock.waffle:waffle-tomcat7 (1.7.5), fr.sewatech.utils:tc-utils (>=0.3.0, <=0.4.0) +5 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (7.0.65)

org.apache.tomcat:tomcat-coyote MAVEN version 7.0.65 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - com.github.dblock.waffle:waffle-tomcat7 1.7.5 - fr.sewatech.utils:tc-utils =0.3.0, =10.6, =10.7...

fr.jcgay.server-notifier:tomcat-notifier (0.1), org.apache.tomcat:tomcat-catalina-ant (7.0.59) +4 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (7.0.59)

org.apache.tomcat:tomcat-coyote MAVEN version 7.0.59 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - fr.jcgay.server-notifier:tomcat-notifier 0.1 - org.apache.tomcat:tomcat-catalina-ant 7.0.59 -...

CVE-2024-34891

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request...

CVE-2024-34883

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to read proxy-server accounts passwords via HTTP GET request...

org.apache.tomcat:tomcat-catalina-ha (8.0.20), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.20) +2 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.0.20)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.20 - org.apache.tomcat:tomcat-catalina-jmx-remote...

CVE-2024-34891

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request...

CVE-2024-34883

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to read proxy-server accounts passwords via HTTP GET request...

CVE-2024-34891

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request...

CVE-2024-34883

CVE-2024-34883 affects 1C-Bitrix Bitrix24 v23.300.100. The vulnerability arises from insufficient protection of credentials in the DAV server settings, enabling remote administrators to read proxy-server account passwords via an HTTP GET request. Impact is confidentiality: high. Exploitation deta...

CVE-2024-34891

The 1C-Bitrix Bitrix24 platform, specifically version 23.300.100 , is vulnerable to the disclosure of sensitive information due to insufficiently protected credentials in DAV server settings . A remote administrator can exploit this flaw to read Exchange account passwords by sending an HTTP GET r...