Lucene search
+L

1313 matches found

Vulnrichment
Vulnrichment
•added 2026/07/21 5:38 p.m.•11 views

CVE-2026-56582 HCL MyCloud was affected with SSL/TLS Protocol Affected with LUCKY13 Vulnerability.

HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack...

3.1CVSS5.8AI score0.00155EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/21 5:38 p.m.•38 views

CVE-2026-56582 HCL MyCloud was affected with SSL/TLS Protocol Affected with LUCKY13 Vulnerability.

HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack...

3.1CVSS0.00155EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/21 5:38 p.m.•24 views

EUVD-2026-46345

HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack...

3.1CVSS5.3AI score0.00155EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/21 5:38 p.m.•34 views

CVE-2026-56582

CVE-2026-56582 affects HCL MyCloud, describing an SSL/TLS LUCKY13 padding-oracle vulnerability that could allow an attacker to decrypt sensitive data over the network. CVSS 3.1 (LOW) with Network attack, High complexity, Low privileges, No user interaction, and no impact to integrity/availability...

3.1CVSS5.8AI score0.00155EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/07/21 5:38 p.m.•18 views

CVE-2026-56582

HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack...

3.1CVSS5.3AI score0.00155EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•20 views

PT-2026-62008

Name of the Vulnerable Software and Affected Versions HCL MyCloud affected versions not specified Description HCL MyCloud is susceptible to the LUCKY13 vulnerability, which allows an attacker to decrypt sensitive information. This is achieved through a TLS/SSL padding oracle attack, a side-channe...

3.1CVSS5.7AI score0.00155EPSS
SaveExploits0References4
Oracle linux
Oracle linux
•added 2026/07/21 12:00 a.m.•26 views

tomcat9 security update

1:9.0.117-2 - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds 1:9.0.117-1 - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is...

9.6CVSS6.8AI score0.10173EPSS
SaveExploits12
Tenable Nessus
Tenable Nessus
•added 2026/07/21 12:00 a.m.•19 views

Oracle Linux 10 : tomcat9 (ELSA-2026-36790)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36790 advisory. - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 - Resolves: Tomcat: OCSP checks...

9.1CVSS6.8AI score0.06561EPSS
SaveExploits11References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•6 views

CVE-2026-56582: Use of a Broken or Risky Cryptographic Algorithm

HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack...

3.1CVSS5.8AI score0.00155EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/20 12:00 a.m.•21 views

TencentOS Server 3: tomcat (TSSA-2026:0631)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0631 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

7.5CVSS7.3AI score0.06561EPSS
SaveExploits8References3
Tenable Nessus
Tenable Nessus
•added 2026/07/15 12:00 a.m.•17 views

MiracleLinux 8 : tomcat-9.0.87-2.el8_10 (AXSA:2026-1262:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1262:04 advisory. Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor CVE-2026-29146 Apache Tomcat: Apache...

7.5CVSS7.6AI score0.06561EPSS
SaveExploits8References3
OSV
OSV
•added 2026/07/14 9:41 p.m.•18 views

JLSEC-2026-745 Bleichenbacher padding oracle in PKCS#7 KTRI decryption

Bleichenbacher padding oracle in PKCS7 KTRI decryption. When decrypting PKCS7 EnvelopedData using RSA PKCS1 v1.5 key transport, wolfSSL returned distinguishable error codes depending on whether RSA padding validation failed versus whether the decrypted content was malformed. An attacker able to...

6.5CVSS5.8AI score0.00243EPSS
SaveExploits0References5
OSV
OSV
•added 2026/07/14 9:41 p.m.•17 views

JLSEC-2026-732 A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover...

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated...

6.3CVSS6.1AI score0.00149EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/07/14 6:04 p.m.•18 views

Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor

A flaw was found in Apache Tomcat. This Padding Oracle vulnerability, present in the EncryptInterceptor with its default configuration, could allow a remote attacker to decrypt sensitive information. By exploiting weaknesses in the encryption padding, an attacker may be able to gain unauthorized...

7.5CVSS7.3AI score0.02887EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
•added 2026/07/14 4:08 p.m.•16 views

Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor

A flaw was found in Apache Tomcat. This Padding Oracle vulnerability, present in the EncryptInterceptor with its default configuration, could allow a remote attacker to decrypt sensitive information. By exploiting weaknesses in the encryption padding, an attacker may be able to gain unauthorized...

7.5CVSS7.3AI score0.02887EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
•added 2026/07/13 3:46 a.m.•24 views

Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor

A flaw was found in Apache Tomcat. This Padding Oracle vulnerability, present in the EncryptInterceptor with its default configuration, could allow a remote attacker to decrypt sensitive information. By exploiting weaknesses in the encryption padding, an attacker may be able to gain unauthorized...

7.5CVSS7.3AI score0.02887EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
•added 2026/07/13 3:46 a.m.•19 views

Important: Red Hat Security Advisory: tomcat security, bug fix, and enhancement update

An update for tomcat is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.5CVSS7.3AI score0.06561EPSS
SaveExploits8References4
Tenable Nessus
Tenable Nessus
•added 2026/07/13 12:00 a.m.•16 views

AlmaLinux 10 : tomcat9 (ALSA-2026:36790)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:36790 advisory. Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor CVE-2026-29146 Apache Tomcat: Apache Tomcat:...

9.1CVSS7AI score0.06561EPSS
SaveExploits11References15
Rockylinux
Rockylinux
•added 2026/07/10 12:05 p.m.•22 views

tomcat9 security, bug fix, and enhancement update

An update is available for tomcat9. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Tomcat is the servlet container that is used in the official Reference...

9.1CVSS6.9AI score0.06561EPSS
SaveExploits11
OSV
OSV
•added 2026/07/10 12:05 p.m.•22 views

RLSA-2026:36790 Important: tomcat9 security, bug fix, and enhancement update

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

7.5CVSS7.5AI score0.06561EPSS
SaveExploits8References3
Rows per page
Query Builder