Lucene search
+L

16 matches found

RedHat Linux
RedHat Linux
•added 2026/09/03 9:43 a.m.•12 views

tomcat: Apache Tomcat: Security constraint bypass due to improper access control

A flaw was found in Apache Tomcat. This improper access control and incorrect authorization vulnerability allows an attacker to bypass security constraints. This occurs when a security constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path, potential...

9.1CVSS7.8AI score0.00538EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/08/31 5:06 p.m.•12 views

CVE-2026-65182

A flaw was found in Apache Tomcat. This improper access control and incorrect authorization vulnerability allows an attacker to bypass security constraints. This occurs when a security constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path, potential...

9.1CVSS7.7AI score0.00538EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/08/27 12:25 a.m.•13 views

SUSE CVE-2026-65182

Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...

7.5CVSS7.8AI score0.00538EPSS
SaveExploits0References13
Snyk
Snyk
•added 2026/08/26 12:33 a.m.•14 views

Incorrect Authorization

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Incorrect Authorization in the processing of security constraints when a constraint for a longer path is specified before a more...

9.1CVSS7.8AI score0.00538EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/26 12:30 a.m.•12 views

EUVD-2026-66124

Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...

7.8AI score0.00538EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/08/26 12:30 a.m.•29 views

Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability

Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...

9.1CVSS7.8AI score0.00538EPSS
SaveExploits0References10Affected Software3
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-65182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specifi...

9.1CVSS7.8AI score0.00538EPSS
SaveExploits0References4
NVD
NVD
•added 2026/08/25 10:17 p.m.•27 views

CVE-2026-65182

Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...

9.1CVSS0.00538EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/25 10:17 p.m.•13 views

DEBIAN-CVE-2026-65182

Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...

9.1CVSS7.8AI score0.00538EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/08/25 9:43 p.m.•16 views

CVE-2026-65182

Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...

9.1CVSS7.8AI score0.00538EPSS
SaveExploits0
CVE
CVE
•added 2026/08/25 9:43 p.m.•309 views

CVE-2026-65182

Apache Tomcat is vulnerable to an Improper Access Control and Incorrect Authorization flaw where security constraints can be bypassed. This occurs if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. The vulnerability affects versions 11.0.0-...

9.1CVSS7.8AI score0.00538EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/20 12:00 a.m.•17 views

PT-2026-81876

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.0.M1 through 9.0.120 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.0 through 7.0.109...

9.1CVSS7.8AI score0.00538EPSS
SaveExploits0References93
RedHat Linux
RedHat Linux
•added 2026/08/18 9:28 a.m.•9 views

tomcat: Apache Tomcat: Security constraint bypass due to improper access control

A flaw was found in Apache Tomcat. This improper access control and incorrect authorization vulnerability allows an attacker to bypass security constraints. This occurs when a security constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path, potential...

9.1CVSS7.8AI score0.00538EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
•added 2026/04/29 8:01 a.m.•16 views

EDAC/mc: Fix error path ordering in edac_mc_alloc()

...

5.5CVSS6.1AI score0.00162EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/04/27 5:34 p.m.•45 views

CVE-2026-31689 EDAC/mc: Fix error path ordering in edac_mc_alloc()

In the Linux kernel, the following vulnerability has been resolved: EDAC/mc: Fix error path ordering in edacmcalloc When the mci-pvtinfo allocation in edacmcalloc fails, the error path will call putdevice which will end up calling the device's release function. However, the init ordering is wrong...

0.00162EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/04/27 5:34 p.m.•19 views

EUVD-2026-25886

In the Linux kernel, the following vulnerability has been resolved: EDAC/mc: Fix error path ordering in edacmcalloc When the mci-pvtinfo allocation in edacmcalloc fails, the error path will call putdevice which will end up calling the device's release function. However, the init ordering is wrong...

5.3AI score0.00162EPSS
SaveExploits0References6
Rows per page
Query Builder