https://vulnerability.circl.lu Vulnerabilities published under the CPE names of the products of Apache Software Foundation. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 20:15:06 +0000 https://vulnerability.circl.lu/vuln/cve-2026-34486 Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor https://vulnerability.circl.lu/vuln/cve-2026-34486 Thu, 09 Apr 2026 19:35:35 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases Apache Tomcat: Principal lookup can fail open in some cases https://vulnerability.circl.lu/vuln/cve-2026-68569 Tue, 25 Aug 2026 21:59:17 +0000 https://vulnerability.circl.lu/vuln/cve-2026-41293 Apache Tomcat: HTTP/2 request headers not validated Apache Tomcat: HTTP/2 request headers not validated https://vulnerability.circl.lu/vuln/cve-2026-41293 Tue, 12 May 2026 15:19:35 +0000 https://vulnerability.circl.lu/vuln/cve-2026-28780 Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() https://vulnerability.circl.lu/vuln/cve-2026-28780 Tue, 05 May 2026 21:29:41 +0000 https://vulnerability.circl.lu/vuln/cve-2026-42536 Apache HTTP Server: mod_xml2enc heap overflow Apache HTTP Server: mod_xml2enc heap overflow https://vulnerability.circl.lu/vuln/cve-2026-42536 Mon, 08 Jun 2026 15:23:46 +0000 https://vulnerability.circl.lu/vuln/cve-2026-44185 Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request` Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request` https://vulnerability.circl.lu/vuln/cve-2026-44185 Mon, 08 Jun 2026 15:22:11 +0000 https://vulnerability.circl.lu/vuln/cve-2026-34355 Apache HTTP Server: mod_proxy_html buffer overflow Apache HTTP Server: mod_proxy_html buffer overflow https://vulnerability.circl.lu/vuln/cve-2026-34355 Mon, 08 Jun 2026 15:20:30 +0000 https://vulnerability.circl.lu/vuln/cve-2026-66755 Apache Tika: Arbitrary Local File Read in ISArchiveParser Apache Tika: Arbitrary Local File Read in ISArchiveParser https://vulnerability.circl.lu/vuln/cve-2026-66755 Thu, 30 Jul 2026 19:16:42 +0000 https://vulnerability.circl.lu/vuln/cve-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints Apache Tomcat: Servlet role references can bypass declarative role constraints https://vulnerability.circl.lu/vuln/cve-2026-66422 Tue, 25 Aug 2026 21:55:16 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68525 Apache Tomcat: Redirect after FORM auth may bypass method specific constraints Apache Tomcat: Redirect after FORM auth may bypass method specific constraints https://vulnerability.circl.lu/vuln/cve-2026-68525 Tue, 25 Aug 2026 21:57:18 +0000