https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:27:28.204314+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-145 certa-2013-avi-145 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle Solaris</span>. Certaines d'entre elles… 2026-10-03T05:27:28.217654+00:00 certa-2013-avi-145 https://cve.radiocsirt.org/vuln/euvd-2026-113321 EUVD-2026-113321 2026-10-03T05:27:28.217693+00:00 EUVD-2026-113321 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5885 fkie_cve-2012-5885 2026-10-03T05:27:28.217708+00:00

The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184.

 https://cve.radiocsirt.org/vuln/ghsa-99rf-92v6-cwx4 GHSA-99rf-92v6-cwx4 — Improper Access Control in Apache Tomcat 2026-10-03T05:27:28.217744+00:00

Affected: Maven: org.apache.tomcat:tomcat

The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184.

 https://cve.radiocsirt.org/vuln/gsd-2012-5885 gsd-2012-5885 2026-10-03T05:27:28.217769+00:00 gsd-2012-5885 https://cve.radiocsirt.org/vuln/rhsa-2013:0265 RHSA-2013:0265 — Red Hat Security Advisory: tomcat6 security update 2026-10-03T05:27:28.217780+00:00

tomcat: HTTP NIO connector OOM DoS via a request with large headers Tomcat/JBoss Web - Bypass of CSRF prevention filter Tomcat - Denial Of Service when using NIO+SSL+sendfile tomcat: three DIGEST authentication implementation issues tomcat: three DIGEST authentication implementation issues tomcat: three DIGEST authentication implementation issues