https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:16:50.375893+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-244 certfr-2014-avi-244 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle Solaris</span>. Certaines d'entre elles… 2026-10-03T00:16:50.499776+00:00 certfr-2014-avi-244 https://cve.radiocsirt.org/vuln/euvd-2026-107358 EUVD-2026-107358 2026-10-03T00:16:50.499823+00:00 EUVD-2026-107358 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4286 fkie_cve-2013-4286 2026-10-03T00:16:50.499837+00:00

Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a "Transfer-Encoding: chunked" header. NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090.

 https://cve.radiocsirt.org/vuln/ghsa-j448-j653-r3vj GHSA-j448-j653-r3vj — Apache Tomcat is vulnerable to HTTP request-smuggling 2026-10-03T00:16:50.499869+00:00

Affected: Maven: org.apache.tomcat:tomcat

Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a "Transfer-Encoding: chunked" header. NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090.

 https://cve.radiocsirt.org/vuln/gsd-2013-4286 gsd-2013-4286 2026-10-03T00:16:50.499899+00:00 gsd-2013-4286 https://cve.radiocsirt.org/vuln/rhsa-2014:0343 RHSA-2014:0343 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.2 update 2026-10-03T00:16:50.499912+00:00

tomcat: multiple content-length header poisoning flaws PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application 6: JSM policy not respected by deployed applications

 https://cve.radiocsirt.org/vuln/rhsa-2014:0686 RHSA-2014:0686 — Red Hat Security Advisory: tomcat security update 2026-10-03T00:16:50.499935+00:00

tomcat: multiple content-length header poisoning flaws tomcat: incomplete fix for CVE-2012-3544 tomcat7: RHEL-7 regression causing DoS

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4286 Withdrawn: UBUNTU-CVE-2013-4286 2026-10-03T00:16:50.499953+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7

Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a "Transfer-Encoding: chunked" header. NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0754 WID-SEC-W-2023-0754 — Apache Tomcat: Mehrere Schwachstellen 2026-10-03T00:16:50.499977+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um einen Denial of Service Zustand herbeizuführen.