Lucene search
K

7 matches found

OSV
OSV
added 2026/05/12 4:16 p.m.1 views

DEBIAN-CVE-2026-43512

DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from before 7.0.0. Older unsupported...

9.8CVSS5.7AI score0.00139EPSS
Exploits0References1
SUSE Linux
SUSE Linux
added 2026/04/22 4:24 p.m.4 views

Security update for tomcat11

This update for tomcat11 fixes the following issues: Security fixes: CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. CVE-2026-25854: Occasionally open redirect bsc1261851. CVE-2026-29129: TLS cipher order is not preserved bsc1261852. CVE-2026-29145: OCSP checks sometimes...

8.7CVSS5.8AI score0.12919EPSS
Exploits6References40
Tenable Nessus
Tenable Nessus
added 2026/04/10 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-34486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue...

7.5CVSS7.3AI score0.12919EPSS
Exploits5References3
OSV
OSV
added 2026/04/09 8:16 p.m.4 views

UBUNTU-CVE-2026-34486

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the...

7.5CVSS5.8AI score0.01889EPSS
Exploits5References3
OpenVAS
OpenVAS
added 2024/01/17 12:0 a.m.27 views

Oracle Java SE Security Update (jan2024) 02 - Linux

Oracle Java SE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS7.7AI score0.00319EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2023/10/30 12:0 a.m.17 views

Debian: Security Advisory (DLA-3636-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.4AI score0.00098EPSS
Exploits0References4
Debian
Debian
added 2023/10/29 8:16 a.m.30 views

[SECURITY] [DLA 3636-1] openjdk-11 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3636-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 29, 2023 https://wiki.debian.org/LTS -...

5.3CVSS5.9AI score0.00098EPSS
Exploits0
Rows per page
Query Builder