https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:55:50.466635+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2009-avi-211 certa-2009-avi-211 — Plusieurs vulnérabilités présentes dans Apache Tomcat permettent à un utilisateur distant de provoquer un déni de servi… 2026-10-03T14:55:50.568314+00:00 certa-2009-avi-211 https://cve.radiocsirt.org/vuln/euvd-2026-121233 EUVD-2026-121233 2026-10-03T14:55:50.568380+00:00 EUVD-2026-121233 https://cve.radiocsirt.org/vuln/fkie_cve-2009-0033 fkie_cve-2009-0033 2026-10-03T14:55:50.568396+00:00

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.

 https://cve.radiocsirt.org/vuln/ghsa-5cw4-ggx9-36vg GHSA-5cw4-ggx9-36vg — Apache Tomcat Denial of Service via Malformed Request Headers 2026-10-03T14:55:50.568427+00:00

Affected: Maven: org.apache.tomcat:tomcat

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.

 https://cve.radiocsirt.org/vuln/gsd-2009-0033 gsd-2009-0033 2026-10-03T14:55:50.568477+00:00 gsd-2009-0033 https://cve.radiocsirt.org/vuln/jvndb-2009-000037 jvndb-2009-000037 2026-10-03T14:55:50.568490+00:00

Apache Tomcat from The Apache Software Foundation contains a denial of service (DoS) vulnerability. Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page (JSP) technologies. If Tomcat receives a request with an invalid header via the Java AJP connector, it will not return an error and instead closes the AJP connection. In case this connector is member of a mod_jk load balancing worker, this member will be put into an error state and will be blocked from use for approximately one minute. Thus the behavior can be used for a denial of service attack using a carefully crafted request. According to the developer, unsupported Apache Tomcat 3.x, 4.0.x, and 5.0.x may also be affected. For more information, refer to the developer's website. Yoshihito Fukuyama of NTT OSS Center reported this vulnerability to IPA. JPCERT/CC coordinated with The Apache Software Foundation and the vendors under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/rhsa-2009:1164 RHSA-2009:1164 — Red Hat Security Advisory: tomcat security update 2026-10-03T14:55:50.568514+00:00

Improve cookie parsing for tomcat5 tomcat request dispatcher information disclosure vulnerability tomcat6 Denial-Of-Service with AJP connection tomcat6 Information disclosure in authentication classes tomcat: XSS in Apache Tomcat calendar application tomcat XML parser information disclosure