6 matches found
The vulnerability of the rewrite mechanism (RewriteValve) of the Apache Tomcat application server allows a hacker to circumvent access control restrictions.
The vulnerability of the rewrite mechanism RewriteValve in the Apache Tomcat application server is related to the implementation of incorrect flow control. Exploiting this vulnerability allows a malicious actor to circumvent access control restrictions...
Vulnerability of JavaScript components: Firefox’s WebAssembly browser allows attackers to access sensitive data and compromise its integrity
JavaScript component vulnerability: Firefox’s WebAssembly browser is vulnerable due to the implementation of incorrect flow control. Exploiting this vulnerability could allow a remote attacker to access sensitive data and compromise its integrity...
Always-Incorrect Control Flow Implementation
Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation due to incorrect control flow in the RewriteValve process. An attacker can bypass intended rewrite rules by crafting...
Always-Incorrect Control Flow Implementation
Overview Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation due to incorrect state handling in nested execution paths involving the ICS20 precompile. An attacker can repeatedly utilize the same token balance within a single transaction by exploiting...
CVE-2026-3449
Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used. The Promise remains in a permanently pending state after the signal is aborted, causing any await or .then usage to hang indefinitely. This...
