https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:27:09.519310+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2012-avi-706 certa-2012-avi-706 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Apache Tomcat</span>. Elles permettent à un att… 2026-10-03T05:27:09.570341+00:00 certa-2012-avi-706 https://cve.radiocsirt.org/vuln/euvd-2026-111880 EUVD-2026-111880 2026-10-03T05:27:09.570396+00:00 EUVD-2026-111880 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3546 fkie_cve-2012-3546 2026-10-03T05:27:09.570412+00:00

org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.

 https://cve.radiocsirt.org/vuln/ghsa-jgm2-m5cg-f66g GHSA-jgm2-m5cg-f66g — Authentication Bypass in Apache Tomcat 2026-10-03T05:27:09.570443+00:00

Affected: Maven: org.apache.tomcat:tomcat

org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.

 https://cve.radiocsirt.org/vuln/gsd-2012-3546 gsd-2012-3546 2026-10-03T05:27:09.570468+00:00 gsd-2012-3546 https://cve.radiocsirt.org/vuln/rhsa-2013:0004 RHSA-2013:0004 — Red Hat Security Advisory: tomcat6 security update 2026-10-03T05:27:09.570480+00:00

Web: Bypass of security constraints