https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:29:39.104280+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-00409 bdu:2015-00409 2026-10-02T17:29:39.198896+00:00 bdu:2015-00409 https://cve.radiocsirt.org/vuln/certfr-2014-avi-243 certfr-2014-avi-243 — Une vulnérabilité a été corrigée dans <span class="textit">Apache Tomcat</span>. Elle permet à un attaquant de provoque… 2026-10-02T17:29:39.198935+00:00 certfr-2014-avi-243 https://cve.radiocsirt.org/vuln/euvd-2026-96736 EUVD-2026-96736 2026-10-02T17:29:39.198953+00:00 EUVD-2026-96736 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0119 fkie_cve-2014-0119 2026-10-02T17:29:39.198966+00:00

Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.

 https://cve.radiocsirt.org/vuln/ghsa-prc3-7f44-w48j GHSA-prc3-7f44-w48j — Missing XML Validation in Apache Tomcat 2026-10-02T17:29:39.198995+00:00

Affected: Maven: org.apache.tomcat:tomcat, Maven: org.apache.tomcat:tomcat-catalina, Maven: org.apache.tomcat:tomcat-jasper

Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.

 https://cve.radiocsirt.org/vuln/gsd-2014-0119 gsd-2014-0119 2026-10-02T17:29:39.199029+00:00 gsd-2014-0119 https://cve.radiocsirt.org/vuln/rhsa-2014:0842 RHSA-2014:0842 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.4 security update 2026-10-02T17:29:39.199041+00:00

Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs Tomcat/JBossWeb: Request smuggling via malicious content length header Tomcat/JBossWeb: XML parser hijack by malicious web application

 https://cve.radiocsirt.org/vuln/rhsa-2014:1034 RHSA-2014:1034 — Red Hat Security Advisory: tomcat security update 2026-10-02T17:29:39.199063+00:00

Tomcat/JBossWeb: XML parser hijack by malicious web application

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0119 UBUNTU-CVE-2014-0119 2026-10-02T17:29:39.199077+00:00

Affected: Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7

Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.