https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:05:54.713382+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2007-avi-569 certa-2007-avi-569 — Une vulnérabilité dans Apache Tomcat permet à un utilisateur malveillant d'élever ses privilèges. 2026-10-03T02:05:54.855055+00:00 certa-2007-avi-569 https://cve.radiocsirt.org/vuln/euvd-2026-137091 EUVD-2026-137091 2026-10-03T02:05:54.855097+00:00 EUVD-2026-137091 https://cve.radiocsirt.org/vuln/fkie_cve-2007-5342 fkie_cve-2007-5342 2026-10-03T02:05:54.855113+00:00

The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.

 https://cve.radiocsirt.org/vuln/ghsa-w65j-cmqc-37p2 GHSA-w65j-cmqc-37p2 — JULI logging component in Apache Tomcat does not restrict certain permissions for web applications 2026-10-03T02:05:54.855142+00:00

Affected: Maven: org.apache.tomcat:tomcat-juli

The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the `org.apache.juli.FileHandler` handler.

 https://cve.radiocsirt.org/vuln/gsd-2007-5342 gsd-2007-5342 2026-10-03T02:05:54.855168+00:00 gsd-2007-5342 https://cve.radiocsirt.org/vuln/rhsa-2008:0042 RHSA-2008:0042 — Red Hat Security Advisory: tomcat security update 2026-10-03T02:05:54.855179+00:00

Apache Tomcat's default security policy is too open Absolute path traversal Apache Tomcat WEBDAV