Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 82 available sources using the dropdown above.
Bitnami VulnDB is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-mongodb-2026-82076 | Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server | 2026-09-15T15:39:27.235Z | 2026-09-15T16:02:07.986Z |
| bit-gitlab-2026-85706 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab | 2026-09-15T08:59:48.164Z | 2026-09-15T09:01:14.338Z |
| bit-rclone-2026-88018 | rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass | 2026-09-15T08:49:34.908Z | 2026-09-15T09:01:14.338Z |
| bit-rclone-2026-88017 | rclone: FTP cross-session auth-proxy backend confusion | 2026-09-15T08:49:34.130Z | 2026-09-15T09:01:14.338Z |
| bit-rclone-2026-88016 | rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination | 2026-09-15T08:49:33.247Z | 2026-09-15T09:01:14.338Z |
| bit-dotnet-2026-71328 | .NET and Visual Studio Remote Code Execution Vulnerability | 2026-09-14T08:19:25.641Z | 2026-09-14T08:47:32.703Z |
| bit-tomcat-2026-73180 | Apache Tomcat: Authenticated WebSocket session survives end of HTTP session | 2026-09-11T05:58:41.551Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-68763 | Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset | 2026-09-11T05:58:40.260Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-68569 | Apache Tomcat: Principal lookup can fail open in some cases | 2026-09-11T05:58:38.943Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-68525 | Apache Tomcat: Redirect after FORM auth may bypass method specific constraints | 2026-09-11T05:58:37.623Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-66422 | Apache Tomcat: Servlet role references can bypass declarative role constraints | 2026-09-11T05:58:36.300Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-65927 | Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control | 2026-09-11T05:58:33.710Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-65905 | Apache Tomcat: Limited replay attack possible with DIGEST authentication | 2026-09-11T05:58:32.385Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-65183 | Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets | 2026-09-11T05:58:29.827Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-65182 | Apache Tomcat: Bypass longest prefix security constraint | 2026-09-11T05:58:28.575Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-55957 | Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind | 2026-09-11T05:58:24.643Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-55956 | Apache Tomcat: Security constraints for default servlet ignored method | 2026-09-11T05:58:23.320Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-55955 | Apache Tomcat: EncryptInterceptor not protected against replay attacks | 2026-09-11T05:58:21.982Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-55276 | Apache Tomcat: Logged effective web.xml is incomplete | 2026-09-11T05:58:20.615Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-53434 | Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector | 2026-09-11T05:58:19.349Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-53404 | Apache Tomcat: Bad ornext processing in RewriteValve | 2026-09-11T05:58:18.071Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-50229 | Apache Tomcat: XSS in number guess example | 2026-09-11T05:58:16.667Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-43515 | Apache Tomcat: Security constraints not correctly applied | 2026-09-11T05:58:15.346Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-43514 | Apache Tomcat: AJP secret compared in non-constant time | 2026-09-11T05:58:14.079Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-43513 | Apache Tomcat: LockOutRealm treats user names as case-sensitive | 2026-09-11T05:58:12.683Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-43512 | Apache Tomcat: Digest authenticator will authenticate any unknown user | 2026-09-11T05:58:11.334Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-41284 | Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling | 2026-09-11T05:58:07.266Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-34487 | Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token | 2026-09-11T05:58:04.736Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-34483 | Apache Tomcat: Incomplete escaping of JSON access logs | 2026-09-11T05:58:02.096Z | 2026-09-11T06:12:58.744Z |
| bit-tomcat-2026-25854 | Apache Tomcat: Occasionally open redirect | 2026-09-11T05:57:55.430Z | 2026-09-11T06:12:58.744Z |