1436118 matches found
CVE-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...
CVE-2026-66422
This is an Improper Authorization vulnerability in Apache Tomcat where security-role-ref definitions were incorrectly treated as role aliases within the Realm , enabling a bypass of declarative role constraints beyond the intended Request.isUserInRole() mechanism. Affected releases span 11.0.0-M1...
CVE-2026-66422
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...
Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.11.6 security update
Red Hat multicluster engine for Kubernetes v2.11 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.17.2 security update
Red Hat multicluster engine for Kubernetes v2.17 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
CVE-2026-65182
Apache Tomcat is vulnerable to a security constraint bypass (CVE-2026-65182) caused by improper access control in constraint processing: if a constraint for a longer path is declared before a more restrictive constraint for a shorter sub-path, the more restrictive rule is effectively bypassed. Th...
CVE-2026-65182 Apache Tomcat: Bypass longest prefix security constraint
Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...
DEBIAN-CVE-2026-79141
Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-78979
Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2019-15107
CVE-2019-15107 http://0-sec.org...
CVE-2026-45018
creationtimestamp| type| source ---|---|--- 2026-08-25 20:35:07+00:00| published-proof-of-concept| https://github.com/Chainlit/chainlit/security/advisories/GHSA-w3fx-mc44-mf6j 2026-08-25 22:08:11+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwtfdjmag2e 2026-08-26...
CVE-2026-45019
creationtimestamp| type| source ---|---|--- 2026-08-25 20:35:05+00:00| published-proof-of-concept| https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j 2026-08-25 22:31:31+00:00| seen| https://gist.github.com/alon710/cd9e29ae1307bd41a5c652b5662f31b2 2026-08-31...
GHSA-G352-92JC-35RP vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-Q7P7-M6QG-CWFW vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-43670
A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy...
CVE-2026-79178
CVE-2026-79178 is an incorrect authorization flaw in the Web Authentication (Passkeys & Security Keys) component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page , bypassing the web origin policy and potentially enabling un...
CVE-2026-79262
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
[SECURITY] [DSA 6466-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6466-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 25, 2026 https://www.debian.org/security/faq -...