https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:52:33.970728+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2008-avi-284 certa-2008-avi-284 — Une vulnérabilité dans <span class="textit">Tomcat</span> permet à un utilisateur malveillant de réaliser de l'injectio… 2026-10-03T14:52:33.981199+00:00 certa-2008-avi-284 https://cve.radiocsirt.org/vuln/euvd-2026-127099 EUVD-2026-127099 2026-10-03T14:52:33.981235+00:00 EUVD-2026-127099 https://cve.radiocsirt.org/vuln/fkie_cve-2008-1947 fkie_cve-2008-1947 2026-10-03T14:52:33.981249+00:00

Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.

 https://cve.radiocsirt.org/vuln/ghsa-f98p-9pp6-7q6c GHSA-f98p-9pp6-7q6c — Apache Tomcat Cross-site scripting (XSS) vulnerability 2026-10-03T14:52:33.981276+00:00

Affected: Maven: org.apache.tomcat:tomcat, Maven: org.apache.tomcat.embed:tomcat-embed-core

Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to `host-manager/html/add`.

 https://cve.radiocsirt.org/vuln/gsd-2008-1947 gsd-2008-1947 2026-10-03T14:52:33.981301+00:00 gsd-2008-1947 https://cve.radiocsirt.org/vuln/rhsa-2008:0648 RHSA-2008:0648 — Red Hat Security Advisory: tomcat security update 2026-10-03T14:52:33.981313+00:00

tomcat: Cross-Site-Scripting enabled by sendError call Tomcat host manager xss - name field tomcat RequestDispatcher information disclosure vulnerability tomcat Unicode directory traversal vulnerability