https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:32:43.237152+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-244 certfr-2014-avi-244 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle Solaris</span>. Certaines d'entre elles… 2026-10-03T01:32:43.385586+00:00 certfr-2014-avi-244 https://cve.radiocsirt.org/vuln/euvd-2026-96593 EUVD-2026-96593 2026-10-03T01:32:43.385630+00:00 EUVD-2026-96593 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0033 fkie_cve-2014-0033 2026-10-03T01:32:43.385645+00:00

org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting when handling a session ID in a URL, which allows remote attackers to conduct session fixation attacks via a crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-6gjj-c5mj-4cvp GHSA-6gjj-c5mj-4cvp — Improper Input Validation in Apache Tomcat 2026-10-03T01:32:43.385674+00:00

Affected: Maven: org.apache.tomcat:tomcat

org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting when handling a session ID in a URL, which allows remote attackers to conduct session fixation attacks via a crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2014-0033 gsd-2014-0033 2026-10-03T01:32:43.385697+00:00 gsd-2014-0033 https://cve.radiocsirt.org/vuln/rhsa-2014:0525 RHSA-2014:0525 — Red Hat Security Advisory: Red Hat JBoss Web Server 2.0.1 tomcat6 security update 2026-10-03T01:32:43.385709+00:00

tomcat: multiple content-length header poisoning flaws tomcat: incomplete fix for CVE-2012-3544 tomcat: session fixation still possible with disableURLRewriting enabled apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0033 Withdrawn: UBUNTU-CVE-2014-0033 2026-10-03T01:32:43.385731+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: tomcat6

org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting when handling a session ID in a URL, which allows remote attackers to conduct session fixation attacks via a crafted URL.