Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apache TomcatImproper Authorization vulnerability in Apache Tomcat leads to security constraints specified for th…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2494676

Apache TomcatApache Tomcat: Security constraints for default servlet ignored method

Risk 42
Severity
6.5
Trending
Month
First published (updated )
CVE-2026-55956

Apache TomcatApache Tomcat: EncryptInterceptor not protected against replay attacks

Risk 42
Severity
6.5
First published (updated )
CVE-2026-55955

Apache TomcatApache Tomcat: XSS in number guess example

Risk 40
Severity
6.1
First published (updated )
CVE-2026-50229

Apache TomcatImproper Authorization vulnerability when multiple method constraints define an HTTP method for the …

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2476519
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatImproper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue af…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2476520

Apache TomcatExposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerabi…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2476516

Apache TomcatInput Validation

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2476513

Apache TomcatDEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. T…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2476511

Apache TomcatCLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled v…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2457037
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatCLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled a…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2457043

Apache TomcatInput Validation

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2457025

Apache TomcatApache Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled

Risk 49
Severity
6.5
First published (updated )
CVE-2026-34500

Apache TomcatApache Tomcat: Fix for CVE-2025-66614 is incomplete

Risk 29
Severity
5.3
First published (updated )
CVE-2026-32990

Apache TomcatApache Tomcat: Occasionally open redirect

Risk 40
Severity
6.1
First published (updated )
CVE-2026-25854
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatInput Validation

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2440430

Apache TomcatApache Tomcat: Security constraint bypass with HTTP/0.9

Risk 28
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2026-24733

Apache TomcatImproper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred (includi…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2406588

Apache TomcatApache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS

Risk 35
Severity
5.3
First published (updated )
CVE-2025-61795

maven/org.springframework:spring-webmvcPath traversal vulnerability on non-compliant Servlet containers

Risk 35
Severity
5.9
First published (updated )
CVE-2025-41242
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatApache Tomcat: session fixation via rewrite valve

Risk 40
Severity
6.5
First published (updated )
CVE-2025-55668

Apache TomcatAllocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue aff…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2373015

Apache TomcatPath Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information dis…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2351129

maven/org.apache.tomcat:tomcat-catalinaApache Tomcat: DoS in examples web application

Risk 29
Severity
5.3
First published (updated )
CVE-2024-54677

Apache TomcatURL-encoded request path information can be broken for concurrent requests on ajp-listener causing t…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2293069
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatApache Tomcat: WebSocket DoS with incomplete closing handshake

Risk 49
Severity
6.3
First published (updated )
CVE-2024-23672

Apache TomcatApache Tomcat: Leaking of unrelated request bodies in default error page

Risk 32
Severity
5.3
EPSS
0.69%
First published (updated )
CVE-2024-21733

Apache TomcatApache Tomcat: Trailer header parsing too lenient

Risk 29
Severity
5.3
First published (updated )
CVE-2023-45648

Apache TomcatApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests

Risk 29
Severity
5.3
First published (updated )
CVE-2023-42795

Apache TomcatApache Tomcat: Open redirect with FORM authentication

Risk 40
Severity
6.1
First published (updated )
CVE-2023-41080
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203