https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:41:26.111529+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2007-avi-362 certa-2007-avi-362 — Plusieurs vulnérabilités du moteur de <span class="textit">servlets</span> <span class="textit">Tomcat</span> permetten… 2026-10-02T23:41:26.127235+00:00 certa-2007-avi-362 https://cve.radiocsirt.org/vuln/euvd-2026-135280 EUVD-2026-135280 2026-10-02T23:41:26.127281+00:00 EUVD-2026-135280 https://cve.radiocsirt.org/vuln/fkie_cve-2007-3385 fkie_cve-2007-3385 2026-10-02T23:41:26.127297+00:00

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.

 https://cve.radiocsirt.org/vuln/ghsa-6j8f-66vh-39mj GHSA-6j8f-66vh-39mj — Apache Tomcat Mishandles Character Sequence in Cookies 2026-10-02T23:41:26.127327+00:00

Affected: Maven: org.apache.tomcat:tomcat

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the `\"` character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.

 https://cve.radiocsirt.org/vuln/gsd-2007-3385 gsd-2007-3385 2026-10-02T23:41:26.127356+00:00 gsd-2007-3385 https://cve.radiocsirt.org/vuln/rhsa-2007:0871 RHSA-2007:0871 — Red Hat Security Advisory: tomcat security update 2026-10-02T23:41:26.127368+00:00

tomcat handling of cookies tomcat handling of cookie values tomcat host manager xss