https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:07:38.805819+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2009-avi-211 certa-2009-avi-211 — Plusieurs vulnérabilités présentes dans Apache Tomcat permettent à un utilisateur distant de provoquer un déni de servi… 2026-10-03T21:07:39.336111+00:00 certa-2009-avi-211 https://cve.radiocsirt.org/vuln/euvd-2026-121710 EUVD-2026-121710 2026-10-03T21:07:39.336168+00:00 EUVD-2026-121710 https://cve.radiocsirt.org/vuln/fkie_cve-2009-0580 fkie_cve-2009-0580 2026-10-03T21:07:39.336184+00:00

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.

 https://cve.radiocsirt.org/vuln/ghsa-w227-xcfx-3pj8 GHSA-w227-xcfx-3pj8 — Exposure of Sensitive Information in Apache Tomcat 2026-10-03T21:07:39.336217+00:00

Affected: Maven: org.apache.tomcat:tomcat

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.

 https://cve.radiocsirt.org/vuln/gsd-2009-0580 gsd-2009-0580 2026-10-03T21:07:39.336246+00:00 gsd-2009-0580 https://cve.radiocsirt.org/vuln/rhsa-2009:1143 RHSA-2009:1143 — Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0.CP07 update 2026-10-03T21:07:39.336260+00:00

tomcat request dispatcher information disclosure vulnerability tomcat6 Information disclosure in authentication classes tomcat XML parser information disclosure