https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T11:32:31.099699+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2008-avi-511 certa-2008-avi-511 — Une vulnérabilité a été découverte dans Apache Tomcat. L'exploitation de cette vulnérabilité permet de contourner la po… 2026-10-07T11:32:31.104121+00:00 certa-2008-avi-511 https://cve.radiocsirt.org/vuln/euvd-2026-128364 EUVD-2026-128364 2026-10-07T11:32:31.104159+00:00 EUVD-2026-128364 https://cve.radiocsirt.org/vuln/fkie_cve-2008-3271 fkie_cve-2008-3271 2026-10-07T11:32:31.104175+00:00

Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a "synchronization problem" and lack of thread safety, and related to RemoteFilterValve, RemoteAddrValve, and RemoteHostValve.

 https://cve.radiocsirt.org/vuln/ghsa-5jpg-mjvg-hfhp GHSA-5jpg-mjvg-hfhp 2026-10-07T11:32:31.104207+00:00

Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a "synchronization problem" and lack of thread safety, and related to RemoteFilterValve, RemoteAddrValve, and RemoteHostValve.

 https://cve.radiocsirt.org/vuln/gsd-2008-3271 gsd-2008-3271 2026-10-07T11:32:31.104226+00:00 gsd-2008-3271 https://cve.radiocsirt.org/vuln/jvndb-2008-000069 jvndb-2008-000069 2026-10-07T11:32:31.104239+00:00

Apache Tomcat from The Apache Software Foundation contains a vulnerability which may allow a user from a non-premitted IP address to gain access. Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page (JSP) technologies. Apache Tomcat contains a vulnerability which may allow a user from a non-permitted IP address to gain access to a protected context. This vulnerability was addressed and solved in ASF Bugzilla - Bug 25835. However there was no description regarding this vulnerability in ASF Bugzilla - Bug 25835. Therefore, The Apache Tomcat Development Team has decided to publish an advisory regarding this issue. Kenichi Tsukamoto of Development Dept. II Application Management Middleware Div. FUJITSU LIMITED reported this vulnerability to IPA. JPCERT/CC coordinated with The Apache Software Foundation and the vendors under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/rhsa-2008:1007 RHSA-2008:1007 — Red Hat Security Advisory: tomcat security update for Red Hat Network Satellite Server 2026-10-07T11:32:31.104261+00:00

tomcat: Cross-Site-Scripting enabled by sendError call Tomcat host manager xss - name field tomcat RequestDispatcher information disclosure vulnerability tomcat Unicode directory traversal vulnerability tomcat RemoteFilterValve Information disclosure