57 matches found
ROS-20260922-73-0056
The vulnerability in Tomcat10 is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260922-73-0076
The vulnerability in Tomcat10 is related to access control deficiencies. Exploiting this vulnerability can allow attackers to increase their privileges...
ROS-20260922-73-0088
The vulnerability in Tomcat10 is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260922-73-0085
The vulnerability in Tomcat10 is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260922-73-0067
The vulnerability in Tomcat10 is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260922-73-0119
The vulnerability in Tomcat10 is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260922-73-0062
The vulnerability in Tomcat10 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, who operate remotely, to gain increased privileges...
ROS-20260922-73-0054
The vulnerability in Tomcat10 is related to incorrect session duration. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260922-73-0079
The vulnerability in Tomcat10 is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260922-73-0073
The vulnerability in Tomcat10 is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260922-73-0082
The vulnerability in Tomcat10 relates to bypassing the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...
CLEANSTART-2026-SR71382 Security fix for CVE-2025-31650 applied in: tomcat10 10.1.53-r0
Security vulnerability affects the tomcat10 package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-EV68545 Security fix for CVE-2025-31651 applied in: tomcat10 10.1.53-r0
Security vulnerability affects the tomcat10 package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-BB54045 Security fix for CVE-2025-66614 applied in: thingsboard 4.3.0.1-r2, thingsboard 4.3.1-r0, tomcat10 10.0.27-r1
CVE-2025-66614 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat10: tomcat10-10.1.60-0.1.hum1 noarch tomcat10-admin-webapps-10.1.60-0.1.hum1 noarch tomcat10-common-10.1.60-0.1.hum1 noarch tomcat10-docs-webapp-10.1.60-0.1.hum1 noarch...
OPENSUSE-SU-2026:21810-1 Security update for tomcat10
This update for tomcat10 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. - CVE-2026-65637: HTTP/2 no-authority bypass of strict SNI validation - fix...
ROS-20260819-73-0051
The vulnerability in Tomcat10 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260819-73-0054
The vulnerability in Tomcat10 is related to deficiencies in handling error situations. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...