Most recent entries from all

certa-2012-avi-066 — Plusieurs vulnérabilités permettant de contourner la politique de sécurité, d'exécuter du code arbitraire ou de réalise…

2026-10-03T06:24:03.613023+00:00

certa-2012-avi-066

EUVD-2026-114549

2026-10-03T06:24:03.613069+00:00

EUVD-2026-114549

fkie_cve-2011-1184

2026-10-03T06:24:03.613083+00:00

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, related to lack of checking of nonce (aka server nonce) and nc (aka nonce-count or client nonce count) values.

GHSA-q9xf-jwr4-v445 — Authentication Bypass in Apache Tomcat

2026-10-03T06:24:03.613114+00:00

Affected: Maven: org.apache.tomcat:tomcat

gsd-2011-1184

2026-10-03T06:24:03.613139+00:00

gsd-2011-1184

RHSA-2011:1780 — Red Hat Security Advisory: tomcat6 security and bug fix update

2026-10-03T06:24:03.613151+00:00

tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: password disclosure vulnerability tomcat: security manager restrictions bypass tomcat: authentication bypass and information disclosure tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication