Crítica
CVE-2026-65905
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 213
Restablecer filtros
Crítica
CVE-2026-65182
Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability
Crítica
CVE-2026-68525
Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability
Alta
CVE-2026-41284
Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling
Baja
CVE-2026-43514
Apache Tomcat - AJP secret compared in non-constant time
Crítica
CVE-2026-43512
Apache Tomcat - Digest authenticator will authenticate any unknown user
Alta
CVE-2026-43513
Apache Tomcat: LockOutRealm treats user names as case-sensitive
Crítica
CVE-2026-43515
Apache Tomcat - Security constraints not correctly applied
Alta
CVE-2026-42498
Apache Tomcat - WebSocket authentication header exposure
Crítica
CVE-2026-41293
Apache Tomcat - HTTP/2 request headers not validated
Alta
CVE-2026-34487
Apache Tomcat vulnerable to Insertion of Sensitive Information into Log File
Alta
CVE-2026-34483
Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve
Alta
Explotada en ataques
CVE-2026-34486
Apache Tomcat Missing Encryption of Sensitive Data vulnerability
Media
CVE-2026-34500
Apache Tomcat: CLIENT_CERT authentication does not fail as expected
Alta
CVE-2026-24880
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability
Media
CVE-2026-25854
Apache Tomcat has an Open Redirect vulnerability
Alta
CVE-2026-29146
Apache Tomcat: Padding Oracle vulnerability in EncryptInterceptor
Media
CVE-2026-32990
Apache Tomcat has an Improper Input Validation vulnerability
Crítica
CVE-2026-29145
Apache Tomcat: CLIENT_CERT authentication does not fail as expected
Alta
CVE-2026-29129
Apache Tomcat: Configured cipher preference order not preserved
Baja
CVE-2026-24733
Apache Tomcat - Security constraint bypass with HTTP/0.9
Media
CVE-2025-66614
Apache Tomcat - Client certificate verification bypass
Alta
CVE-2026-24734
Apache Tomcat has an Improper Input Validation vulnerability
Baja
CVE-2025-55754
Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.