https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:56:32.911422+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2008-avi-066 certa-2008-avi-066 — Plusieurs vulnérabilités affectent le moteur de <span class="textit">servlets</span> Apache Tomcat. Elles permettent de… 2026-10-03T13:56:33.070115+00:00 certa-2008-avi-066 https://cve.radiocsirt.org/vuln/euvd-2026-137141 EUVD-2026-137141 2026-10-03T13:56:33.070161+00:00 EUVD-2026-137141 https://cve.radiocsirt.org/vuln/fkie_cve-2007-5333 fkie_cve-2007-5333 2026-10-03T13:56:33.070176+00:00

Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.

 https://cve.radiocsirt.org/vuln/ghsa-cww4-vj5r-rx57 GHSA-cww4-vj5r-rx57 — Exposure of Sensitive Information in Apache Tomcat 2026-10-03T13:56:33.070209+00:00

Affected: Maven: org.apache.tomcat:tomcat

Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.

 https://cve.radiocsirt.org/vuln/gsd-2007-5333 gsd-2007-5333 2026-10-03T13:56:33.070238+00:00 gsd-2007-5333 https://cve.radiocsirt.org/vuln/jvndb-2008-000009 jvndb-2008-000009 2026-10-03T13:56:33.070251+00:00

Apache Tomcat from the Apache Software Foundation contains a vulnerability that could allow a remote attacker to coerce a crafted cookie to a user's web browser. Apache Tomcat from the Apache Software Foundation is a web container that implements both Java Servlets and JavaServer Pages. The developer reports that this issue exists because of an incomplete fix for CVE-2007-3385.

 https://cve.radiocsirt.org/vuln/rhsa-2009:1164 RHSA-2009:1164 — Red Hat Security Advisory: tomcat security update 2026-10-03T13:56:33.070270+00:00

Improve cookie parsing for tomcat5 tomcat request dispatcher information disclosure vulnerability tomcat6 Denial-Of-Service with AJP connection tomcat6 Information disclosure in authentication classes tomcat: XSS in Apache Tomcat calendar application tomcat XML parser information disclosure