Lucene search
+L

13531 matches found

OSV
OSV
added 2026/05/12 3:14 p.m.10 views

CVE-2026-41284 Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117. Older, unsupported versions may also be affected. Users are recommended to upgrade ...

7.5CVSS5.9AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.24 views

PT-2026-40074

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.21 Apache Tomcat versions 10.1.0-M1 through 10.1.54 Apache Tomcat versions 9.0.0.M1 through 9.0.117 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.0 through 7.0.109...

9.8CVSS5.8AI score0.01563EPSS
SaveExploits2References89
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.18 views

Apache Tomcat 信息泄露漏洞

Apache Tomcat is a lightweight web application server developed by the Apache Foundation in the United States. It supports Servlet and JavaServer Page JSP technologies. Apache Tomcat has a vulnerability related to information leakage, which stems from exposing HTTP authentication headers to...

7.3CVSS5.8AI score0.006EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.15 views

PT-2026-40068

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.21 Apache Tomcat versions 10.1.0-M1 through 10.1.54 Apache Tomcat versions 9.0.0.M1 through 9.0.117 Description An issue exists involving the allocation of resources without limits or throttling...

9.8CVSS5.8AI score0.01563EPSS
SaveExploits2References76
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.19 views

PT-2026-40069

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.21 Apache Tomcat versions 10.1.0-M1 through 10.1.54 Apache Tomcat versions 9.0.0.M1 through 9.0.117 Apache Tomcat versions 10.0.0-M1 through 10.0.27 Description Improper Input Validation occurs in...

10CVSS5.8AI score0.01563EPSS
SaveExploits2References84
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.17 views

Apache Tomcat 输入验证错误漏洞

Apache Tomcat is a lightweight web application server developed by the Apache Foundation in the United States. It supports Servlet and JavaServer Page JSP technologies. Vulnerabilities exist in versions of Apache Tomcat from 11.0.0-M1 to 11.0.21, 10.1.0-M1 to 10.1.54, 9.0.0.M1 to 9.0.117, and...

9.8CVSS5.8AI score0.01563EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.16 views

Apache Tomcat 安全漏洞

Apache Tomcat is a lightweight web application server developed by the Apache Foundation in the United States. It supports Servlet and JavaServer Page JSP technologies. Security vulnerabilities exist in versions of Apache Tomcat ranging from 11.0.0-M1 to 11.0.21, from 10.1.0-M1 to 10.1.54, from...

7.5CVSS5.8AI score0.00467EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.31 views

PT-2026-40443

Name of the Vulnerable Software and Affected Versions efw4.X versions prior to 4.08.010 Description The unZip function in efw.file.FileManager writes zip entries to disk using new FilebaseDir, zipEntry.getName without performing a canonical-path check. This allows an attacker to use entry names...

9.3CVSS6.1AI score0.00319EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.22 views

PT-2026-40073

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.21 Apache Tomcat versions 10.1.0-M1 through 10.1.54 Apache Tomcat versions 9.0.0.M1 through 9.0.117 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.0 through 7.0.109 Apache...

9.8CVSS5.8AI score0.01233EPSS
SaveExploits1References64
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.16 views

Apache Tomcat 安全漏洞

Apache Tomcat is a lightweight Web application server developed by the Apache Foundation in the United States. It supports Servlet and JavaServer Page JSP technologies. Security vulnerabilities exist in versions of Apache Tomcat from 11.0.0-M1 to 11.0.21, from 10.1.0-M1 to 10.1.54, and from...

7.5CVSS5.8AI score0.00839EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.39 views

PT-2026-40071

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.21 Apache Tomcat versions 10.1.0-M1 through 10.1.54 Apache Tomcat versions 9.0.0.M1 through 9.0.117 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions prior to 7.0.0 Description An...

10CVSS5.8AI score0.01563EPSS
SaveExploits2References79
Tenable Nessus
Tenable Nessus
added 2026/05/12 12:00 a.m.226 views

Apache Tomcat 9.0.0.M1 < 9.0.118 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 9.0.118. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat9.0.118security-9 advisory. - DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. Th...

9.8CVSS6.6AI score0.01563EPSS
SaveExploits2References18
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.15 views

Apache Tomcat 安全漏洞

Apache Tomcat is a lightweight web application server developed by the Apache Foundation in the United States. It supports Servlet and JavaServer Page JSP technologies. Security vulnerabilities exist in versions of Apache Tomcat ranging from 11.0.0-M1 to 11.0.21, from 10.1.0-M1 to 10.1.54, from...

9.8CVSS5.8AI score0.01233EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.17 views

Apache Tomcat 授权问题漏洞

Apache Tomcat is a lightweight web application server developed by the Apache Foundation in the United States. It supports Servlet and JavaServer Page JSP technologies. Vulnerabilities exist in versions of Apache Tomcat ranging from 11.0.0-M1 to 11.0.21, from 10.1.0-M1 to 10.1.54, from 9.0.0.M1 t...

9.1CVSS5.8AI score0.01136EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.13 views

Apache Tomcat 安全漏洞

Apache Tomcat is a lightweight web application server developed by the Apache Foundation in the United States. It supports Servlet and JavaServer Page JSP technologies. Security vulnerabilities exist in versions of Apache Tomcat ranging from 11.0.0-M1 to 11.0.21, from 10.1.0-M1 to 10.1.54, from...

3.7CVSS5.8AI score0.00352EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.17 views

PT-2026-40072

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.21 Apache Tomcat versions 10.1.0-M1 through 10.1.54 Apache Tomcat versions 9.0.0.M1 through 9.0.117 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.0 through 7.0.109...

9.8CVSS5.8AI score0.01563EPSS
SaveExploits2References71
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.20 views

PT-2026-40070

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.21 Apache Tomcat versions 10.1.0-M1 through 10.1.54 Apache Tomcat versions 9.0.2 through 9.0.117 Apache Tomcat versions 8.5.24 through 8.5.100 Apache Tomcat versions 7.0.83 through 7.0.109...

9.8CVSS5.8AI score0.01563EPSS
SaveExploits2References74
Tenable Nessus
Tenable Nessus
added 2026/05/12 12:00 a.m.13 views

Apache Tomcat 10.1.0.M1 < 10.1.55 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.55. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.55security-10 advisory. - DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat...

9.8CVSS6.6AI score0.01563EPSS
SaveExploits2References18
Atlassian
Atlassian
added 2026/05/11 11:30 p.m.30 views

Security Misconfiguration vulnerability at Tomcat dependency in Bamboo Data Center

This High severity Security Misconfiguration vulnerability was introduced in version 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0 and 12.1.0 of Bamboo Data Center. This Security Misconfiguration vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

7.5CVSS5.8AI score0.00259EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2026/05/11 2:07 p.m.200 views

Exploit for Missing Encryption of Sensitive Data in Apache Tomcat

CVE-2026-34486 EncryptInterceptor fail-open bypass in Apache...

7.5CVSS6AI score0.98616EPSS
SaveExploits7
Rows per page
Query Builder