https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:59:18.783699+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2015-avi-317 certfr-2015-avi-317 — De multiples vulnérabilités ont été corrigées dans les produits <span class="textit">BlueCoat</span>. Elles permettent… 2026-10-03T07:59:18.950615+00:00 certfr-2015-avi-317 https://cve.radiocsirt.org/vuln/cnvd-2015-03233 cnvd-2015-03233 2026-10-03T07:59:18.950658+00:00 cnvd-2015-03233 https://cve.radiocsirt.org/vuln/euvd-2026-102760 EUVD-2026-102760 2026-10-03T07:59:18.950674+00:00 EUVD-2026-102760 https://cve.radiocsirt.org/vuln/fkie_cve-2014-7810 fkie_cve-2014-7810 2026-10-03T07:59:18.950685+00:00

The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.

 https://cve.radiocsirt.org/vuln/ghsa-4c43-cwvx-9crh GHSA-4c43-cwvx-9crh — Improper Access Control in Apache Tomcat 2026-10-03T07:59:18.950714+00:00

Affected: Maven: org.apache.tomcat:tomcat

The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.

 https://cve.radiocsirt.org/vuln/gsd-2014-7810 gsd-2014-7810 2026-10-03T07:59:18.950750+00:00 gsd-2014-7810 https://cve.radiocsirt.org/vuln/rhsa-2015:1621 RHSA-2015:1621 — Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 tomcat security update 2026-10-03T07:59:18.950762+00:00

tomcat: non-persistent DoS attack by feeding data by aborting an upload Tomcat/JbossWeb: security manager bypass via EL expressions

 https://cve.radiocsirt.org/vuln/rhsa-2016:2046 RHSA-2016:2046 — Red Hat Security Advisory: tomcat security update 2026-10-03T07:59:18.950780+00:00

Tomcat/JbossWeb: security manager bypass via EL expressions tomcat: Session fixation Tomcat: CGI sets environmental variable based on user supplied Proxy request header tomcat: Local privilege escalation via systemd-tmpfiles service tomcat: tomcat writable config files allow privilege escalation

 https://cve.radiocsirt.org/vuln/suse-su-2015:1281-1 SUSE-SU-2015:1281-1 — Security update for tomcat 2026-10-03T07:59:18.950801+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-7810 UBUNTU-CVE-2014-7810 2026-10-03T07:59:18.950815+00:00

Affected: Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat6

The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1594 WID-SEC-W-2023-1594 — IBM Tivoli Network Manager: Mehrere Schwachstellen 2026-10-03T07:59:18.950837+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuführen.