https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:18:42.446477+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-00612 bdu:2016-00612 2026-10-03T12:18:42.464077+00:00 bdu:2016-00612 https://cve.radiocsirt.org/vuln/cnvd-2016-01381 cnvd-2016-01381 2026-10-03T12:18:42.464116+00:00 cnvd-2016-01381 https://cve.radiocsirt.org/vuln/euvd-2026-93349 EUVD-2026-93349 2026-10-03T12:18:42.464131+00:00 EUVD-2026-93349 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5346 fkie_cve-2015-5346 2026-10-03T12:18:42.464142+00:00

Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote attackers to hijack web sessions by leveraging use of a requestedSessionSSL field for an unintended request, related to CoyoteAdapter.java and Request.java.

 https://cve.radiocsirt.org/vuln/ghsa-jrcp-c39h-r29x GHSA-jrcp-c39h-r29x — Improper Neutralization of Input During Web Page Generation in Apache Tomcat 2026-10-03T12:18:42.464172+00:00

Affected: Maven: org.apache.tomcat:tomcat

Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote attackers to hijack web sessions by leveraging use of a requestedSessionSSL field for an unintended request, related to CoyoteAdapter.java and Request.java.

 https://cve.radiocsirt.org/vuln/gsd-2015-5346 gsd-2015-5346 2026-10-03T12:18:42.464200+00:00 gsd-2015-5346 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10446-1 openSUSE-SU-2024:10446-1 — tomcat-8.0.36-3.3 on GA media 2026-10-03T12:18:42.464211+00:00

tomcat-8.0.36-3.3 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2016:1087 RHSA-2016:1087 — Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 update 2026-10-03T12:18:42.464233+00:00

tomcat: directory disclosure tomcat: Session fixation tomcat: CSRF token leak tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms tomcat: security manager bypass via setGlobalContext()

 https://cve.radiocsirt.org/vuln/suse-su-2016:0769-1 SUSE-SU-2016:0769-1 — Security update for tomcat 2026-10-03T12:18:42.464253+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5346 UBUNTU-CVE-2015-5346 2026-10-03T12:18:42.464269+00:00

Affected: Ubuntu:14.04:LTS: tomcat7

Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote attackers to hijack web sessions by leveraging use of a requestedSessionSSL field for an unintended request, related to CoyoteAdapter.java and Request.java.