|
1721
|
6.1 |
MEDIUM
Network
|
apache
|
tomcat
|
Occasional URL redirection to untrusted Site ('Open Redirect') vulnerability in Apache Tomcat via the LoadBalancerDrainingValve.
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, fro…
|
CWE-601
Open Redirect
|
CVE-2026-25854
|
2026-04-14 23:01 |
2026-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1722
|
7.5 |
HIGH
Network
|
apache
|
tomcat
|
Configured cipher preference order not preserved vulnerability in Apache Tomcat.
This issue affects Apache Tomcat: from 11.0.16 through 11.0.18, from 10.1.51 through 10.1.52, from 9.0.114 through 9.…
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2026-29129
|
2026-04-14 23:00 |
2026-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1723
|
6.5 |
MEDIUM
Network
|
mediawiki
|
mediawiki
|
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryRevisionsBase.Php.
This issue affects MediaWiki: from * before 1.39.16, 1.43…
|
CWE-20
Improper Input Validation
|
CVE-2025-67480
|
2026-04-14 22:50 |
2026-02-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1724
|
6.5 |
MEDIUM
Network
|
mediawiki
|
mediawiki
|
Vulnerabilidad en Wikimedia Foundation MediaWiki. Esta vulnerabilidad está asociada con los archivos de programa includes/Api/ApiQueryRevisionsBase.Php.
Este problema afecta a MediaWiki: desde * ant…
|
CWE-20
Improper Input Validation
|
CVE-2025-67480
|
2026-04-14 22:50 |
2026-02-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1725
|
9.8 |
CRITICAL
Network
|
mediawiki
|
mediawiki
|
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiFormatXml.Php.
This issue affects MediaWiki: from * before 1.39.16, 1.43.6, 1.44.…
|
CWE-20
Improper Input Validation
|
CVE-2025-67484
|
2026-04-14 22:26 |
2026-02-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1726
|
9.8 |
CRITICAL
Network
|
mediawiki
|
mediawiki
|
Vulnerabilidad en Wikimedia Foundation MediaWiki. Esta vulnerabilidad está asociada con los archivos de programa includes/Api/ApiFormatXml.Php.
Este problema afecta a MediaWiki: desde * antes de 1.3…
|
CWE-20
Improper Input Validation
|
CVE-2025-67484
|
2026-04-14 22:26 |
2026-02-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1727
|
9.1 |
CRITICAL
Network
|
apache
|
tomcat tomcat_native
|
CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native.
This issue affects Apache Tomcat: from 11.0.0…
|
CWE-287
Improper Authentication
|
CVE-2026-29145
|
2026-04-14 22:22 |
2026-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1728
|
4.3 |
MEDIUM
Network
|
google
|
chrome
|
Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium secu…
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2026-5869
|
2026-04-14 22:16 |
2026-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1729
|
4.3 |
MEDIUM
Network
|
google
|
chrome
|
Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium secu…
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2026-5867
|
2026-04-14 22:16 |
2026-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1730
|
4.3 |
MEDIUM
Network
|
google
|
chrome
|
Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium s…
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2026-5864
|
2026-04-14 22:16 |
2026-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|