https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:24:42.497420+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2011-avi-485 certa-2011-avi-485 — Une vulnérabilité dans Apache Tomcat permet à un utilisateur malveillant de contourner la politique de sécurité et de p… 2026-10-03T05:24:42.508111+00:00 certa-2011-avi-485 https://cve.radiocsirt.org/vuln/euvd-2026-116109 EUVD-2026-116109 2026-10-03T05:24:42.508149+00:00 EUVD-2026-116109 https://cve.radiocsirt.org/vuln/fkie_cve-2011-3190 fkie_cve-2011-3190 2026-10-03T05:24:42.508163+00:00

Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information by causing the connector to interpret a request body as a new request.

 https://cve.radiocsirt.org/vuln/ghsa-c38m-v4m2-524v GHSA-c38m-v4m2-524v — Apache Tomcat Allows Remote Attackers to Spoof AJP Requests 2026-10-03T05:24:42.508190+00:00

Affected: Maven: org.apache.tomcat:tomcat

Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information by causing the connector to interpret a request body as a new request.

 https://cve.radiocsirt.org/vuln/gsd-2011-3190 gsd-2011-3190 2026-10-03T05:24:42.508214+00:00 gsd-2011-3190 https://cve.radiocsirt.org/vuln/rhsa-2011:1780 RHSA-2011:1780 — Red Hat Security Advisory: tomcat6 security and bug fix update 2026-10-03T05:24:42.508227+00:00

tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: password disclosure vulnerability tomcat: security manager restrictions bypass tomcat: authentication bypass and information disclosure tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication