Apache Tomcat: Bypass of security constraints for WebSocket endpoints
cve-program ·
Vendor product: Apache Tomcat
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
cve-program ·
Vendor product: Apache Tomcat
cve-program ·
Vendor product: netty
cve-program ·
Vendor product: vllm
cve-program ·
Vendor product: Apache Tomcat
cve-program ·
Vendor product: fleet
cve-program ·
Vendor product: siyuan
cve-program ·
https://wordpress.org/plugins: lastudio-element-kit
cve-program ·
https://wordpress.org/plugins: lastudio-element-kit
cve-program ·
Vendor product: siyuan
cve-program ·
Vendor product: unsloth-zoo · Vendor product: unsloth
cve-program ·
https://golang.org/pkg: github.com/apache/plc4x/plc4go
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.plc4x:plc4j-spi · https://repo.maven.apache.org/maven2: org.apache.plc4x:plc4j-driver-opcua
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.plc4x:plc4j-driver-opcua
cve-program ·
Vendor product: BcAddonMigrator
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
cve-program ·
Vendor product: U30 Air
cve-program ·
https://git.moodle.org: moodle
cve-program ·
https://git.moodle.org: moodle
cve-program ·
https://git.moodle.org: moodle
cve-program ·
https://git.moodle.org: moodle
cve-program ·
https://git.moodle.org: moodle
cve-program ·
https://git.moodle.org: moodle
cve-program ·
https://git.moodle.org: moodle
cve-program ·
Vendor product: MISP
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.sshd:sshd-ldap
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.sshd:sshd-sftp
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.sshd:sshd-scp
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.sshd:sshd-git
cve-program ·
Vendor product: BVMS
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.sshd:sshd-ldap
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.sshd:sshd-core
cve-program ·
Vendor product: Grafana Enterprise · Vendor product: Grafana OSS
cve-program ·
Vendor product: @anthropic-ai/claude-code
cve-program ·
Vendor product: SDP Client
cve-program ·
Vendor product: SDP Client
cve-program ·
Vendor product: Maksisoft Gym
cve-program ·
https://repo.maven.apache.org/maven2: com.vaadin:vaadin · https://repo.maven.apache.org/maven2: com.vaadin:vaadin-core · https://repo.maven.apache.org/maven2: com.vaadin:vaadin-charts-flow
cve-program ·
Vendor product: SOPLOG
cve-program ·
Vendor product: python-utcp · Vendor product: python-utcp
cve-program ·
Vendor product: nezha
cve-program ·
Vendor product: u-boot
cve-program ·
Vendor product: nginx-proxy-manager
cve-program ·
Vendor product: u-boot
cve-program ·
Vendor product: u-boot
cve-program ·
Vendor product: virtualenv
cve-program ·
Vendor product: ThinkCMF
cve-program ·
Vendor product: LightLLM
cve-program ·
Vendor product: ZHOME A0101
cve-program ·
Vendor product: AiSOC
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.