https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:50:02.911875+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-00613 bdu:2016-00613 2026-10-02T23:50:03.111455+00:00 bdu:2016-00613 https://cve.radiocsirt.org/vuln/certfr-2016-avi-350 certfr-2016-avi-350 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle Linux and Virtualization</span>. Certain… 2026-10-02T23:50:03.111494+00:00 certfr-2016-avi-350 https://cve.radiocsirt.org/vuln/cnvd-2016-01325 cnvd-2016-01325 2026-10-02T23:50:03.111514+00:00 cnvd-2016-01325 https://cve.radiocsirt.org/vuln/euvd-2026-93330 EUVD-2026-93330 2026-10-02T23:50:03.111528+00:00 EUVD-2026-93330 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5351 fkie_cve-2015-5351 2026-10-02T23:50:03.111539+00:00

The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.

 https://cve.radiocsirt.org/vuln/ghsa-w7cg-5969-678w GHSA-w7cg-5969-678w — Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token 2026-10-02T23:50:03.111566+00:00

Affected: Maven: org.apache.tomcat:tomcat

The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.

 https://cve.radiocsirt.org/vuln/gsd-2015-5351 gsd-2015-5351 2026-10-02T23:50:03.111592+00:00 gsd-2015-5351 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10446-1 openSUSE-SU-2024:10446-1 — tomcat-8.0.36-3.3 on GA media 2026-10-02T23:50:03.111604+00:00

tomcat-8.0.36-3.3 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2016:1087 RHSA-2016:1087 — Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 update 2026-10-02T23:50:03.111628+00:00

tomcat: directory disclosure tomcat: Session fixation tomcat: CSRF token leak tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms tomcat: security manager bypass via setGlobalContext()

 https://cve.radiocsirt.org/vuln/suse-su-2016:0769-1 SUSE-SU-2016:0769-1 — Security update for tomcat 2026-10-02T23:50:03.111651+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5351 UBUNTU-CVE-2015-5351 2026-10-02T23:50:03.111670+00:00

Affected: Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7

The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1277 WID-SEC-W-2024-1277 — Oracle Fusion Middleware: Mehrere Schwachstellen 2026-10-02T23:50:03.111691+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.