https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:55:30.158684+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2010-avi-567 certa-2010-avi-567 — Des vulnérabilités ont été découvertes dans Apache Tomcat. Elles permettent à un utilisateur de faire de l'injection de… 2026-10-03T03:55:30.173565+00:00 certa-2010-avi-567 https://cve.radiocsirt.org/vuln/euvd-2026-120429 EUVD-2026-120429 2026-10-03T03:55:30.173619+00:00 EUVD-2026-120429 https://cve.radiocsirt.org/vuln/fkie_cve-2010-4172 fkie_cve-2010-4172 2026-10-03T03:55:30.173635+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.

 https://cve.radiocsirt.org/vuln/ghsa-c78g-qwpw-2jgv GHSA-c78g-qwpw-2jgv — Improper Neutralization of Input During Web Page Generation in Apache Tomcat 2026-10-03T03:55:30.173668+00:00

Affected: Maven: org.apache.tomcat:tomcat

Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.

 https://cve.radiocsirt.org/vuln/gsd-2010-4172 gsd-2010-4172 2026-10-03T03:55:30.173694+00:00 gsd-2010-4172 https://cve.radiocsirt.org/vuln/rhsa-2011:0791 RHSA-2011:0791 — Red Hat Security Advisory: tomcat6 security and bug fix update 2026-10-03T03:55:30.173706+00:00

tomcat: file permission bypass flaw tomcat: cross-site-scripting vulnerability in the manager application tomcat: XSS vulnerability in HTML Manager interface