https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:48:02.528272+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2008-avi-066 certa-2008-avi-066 — Plusieurs vulnérabilités affectent le moteur de <span class="textit">servlets</span> Apache Tomcat. Elles permettent de… 2026-10-03T04:48:02.593921+00:00 certa-2008-avi-066 https://cve.radiocsirt.org/vuln/euvd-2026-137986 EUVD-2026-137986 2026-10-03T04:48:02.593966+00:00 EUVD-2026-137986 https://cve.radiocsirt.org/vuln/fkie_cve-2007-6286 fkie_cve-2007-6286 2026-10-03T04:48:02.593981+00:00

Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as demonstrated by using netcat to send the empty request.

 https://cve.radiocsirt.org/vuln/ghsa-qrj4-rmqg-4hcp GHSA-qrj4-rmqg-4hcp — Apache Tomcat Does Not Properly Handle Empty Requests 2026-10-03T04:48:02.594012+00:00

Affected: Maven: org.apache.tomcat:tomcat

Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as demonstrated by using netcat to send the empty request.

 https://cve.radiocsirt.org/vuln/gsd-2007-6286 gsd-2007-6286 2026-10-03T04:48:02.594039+00:00 gsd-2007-6286