Most recent entries from all

certa-2009-avi-032 — De multiples vulnérabilités affectent la version d'Apache Tomcat fournie avec
Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly unspecified other vectors. NOTE: this may be related to CVE-2006-0254.1.

GHSA-pm78-wxxf-fw98 — Cross-site scripting in Apache Tomcat

2026-10-03T01:36:00.616174+00:00

Affected: Maven: org.apache.tomcat:tomcat

Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly unspecified other vectors. NOTE: this may be related to CVE-2006-0254.1.

gsd-2006-7196

2026-10-03T01:36:00.616200+00:00

gsd-2006-7196

RHSA-2007:0326 — Red Hat Security Advisory: tomcat security update

2026-10-03T01:36:00.616212+00:00

tomcat multiple content-length header poisioning tomcat directory listing issue tomcat XSS in example webapps tomcat XSS in example webapps tomcat directory traversal tomcat accept-language xss flaw tomcat anonymous cipher issue