https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:00:58.469614+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2014-avi-025 certa-2014-avi-025 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle Supply Chain Products Suite</span>. Cert… 2026-10-03T01:00:58.476434+00:00 certa-2014-avi-025 https://cve.radiocsirt.org/vuln/euvd-2026-105894 EUVD-2026-105894 2026-10-03T01:00:58.476472+00:00 EUVD-2026-105894 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2071 fkie_cve-2013-2071 2026-10-03T01:00:58.476487+00:00

java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.

 https://cve.radiocsirt.org/vuln/ghsa-3p5r-7cw3-2m67 GHSA-3p5r-7cw3-2m67 — Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 2026-10-03T01:00:58.476515+00:00

Affected: Maven: org.apache.tomcat:tomcat

java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.

 https://cve.radiocsirt.org/vuln/gsd-2013-2071 gsd-2013-2071 2026-10-03T01:00:58.476538+00:00 gsd-2013-2071 https://cve.radiocsirt.org/vuln/rhsa-2013:1011 RHSA-2013:1011 — Red Hat Security Advisory: Red Hat JBoss Web Server 2.0.1 update 2026-10-03T01:00:58.476549+00:00

httpd: multiple XSS flaws due to unescaped hostnames tomcat: Limited DoS in chunked transfer encoding input filter httpd: XSS flaw in mod_proxy_balancer manager interface tomcat: Session fixation in form authenticator tomcat: Information disclosure in asynchronous context when using AsyncListeners that threw RuntimeExceptions