https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:01:50.368299+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-334 certa-2013-avi-334 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Apache Tomcat</span>. Elles permettent à un att… 2026-10-02T23:01:50.445830+00:00 certa-2013-avi-334 https://cve.radiocsirt.org/vuln/euvd-2026-105890 EUVD-2026-105890 2026-10-02T23:01:50.445881+00:00 EUVD-2026-105890 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2067 fkie_cve-2013-2067 2026-10-02T23:01:50.445896+00:00

java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.

 https://cve.radiocsirt.org/vuln/ghsa-6m48-jxwx-76q7 GHSA-6m48-jxwx-76q7 — Improper Authentication in Apache Tomcat 2026-10-02T23:01:50.445927+00:00

Affected: Maven: org.apache.tomcat:tomcat

java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.

 https://cve.radiocsirt.org/vuln/gsd-2013-2067 gsd-2013-2067 2026-10-02T23:01:50.445952+00:00 gsd-2013-2067 https://cve.radiocsirt.org/vuln/rhsa-2013:0833 RHSA-2013:0833 — Red Hat Security Advisory: JBoss Enterprise Application Platform 6.1.0 update 2026-10-02T23:01:50.445964+00:00

Web: jsessionid exposed via encoded url when using cookie based session tracking JBoss: custom authorization module implementations shared between applications apache-cxf: XML encryption backwards compatibility attacks openssl: DoS due to improper handling of OCSP response verification SSL/TLS: CBC padding timing attack (lucky-13) Installer: Generated auto-install xml is world readable tomcat: Session fixation in form authenticator

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-2067 Withdrawn: UBUNTU-CVE-2013-2067 2026-10-02T23:01:50.445989+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: tomcat6

java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.