https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:59:23.492044+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-00614 bdu:2016-00614 2026-10-02T20:59:23.511920+00:00 bdu:2016-00614 https://cve.radiocsirt.org/vuln/certfr-2016-avi-350 certfr-2016-avi-350 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle Linux and Virtualization</span>. Certain… 2026-10-02T20:59:23.511959+00:00 certfr-2016-avi-350 https://cve.radiocsirt.org/vuln/cnvd-2016-01284 cnvd-2016-01284 2026-10-02T20:59:23.511979+00:00 cnvd-2016-01284 https://cve.radiocsirt.org/vuln/euvd-2026-81502 EUVD-2026-81502 2026-10-02T20:59:23.511992+00:00 EUVD-2026-81502 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0706 fkie_cve-2016-0706 2026-10-02T20:59:23.512004+00:00

Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended SecurityManager restrictions and read arbitrary HTTP requests, and consequently discover session ID values, via a crafted web application.

 https://cve.radiocsirt.org/vuln/ghsa-6vx3-hr43-cfrh GHSA-6vx3-hr43-cfrh — Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 2026-10-02T20:59:23.512032+00:00

Affected: Maven: org.apache.tomcat:tomcat

Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended SecurityManager restrictions and read arbitrary HTTP requests, and consequently discover session ID values, via a crafted web application.

 https://cve.radiocsirt.org/vuln/gsd-2016-0706 gsd-2016-0706 2026-10-02T20:59:23.512057+00:00 gsd-2016-0706 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10446-1 openSUSE-SU-2024:10446-1 — tomcat-8.0.36-3.3 on GA media 2026-10-02T20:59:23.512068+00:00

tomcat-8.0.36-3.3 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2016:1087 RHSA-2016:1087 — Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 update 2026-10-02T20:59:23.512089+00:00

tomcat: directory disclosure tomcat: Session fixation tomcat: CSRF token leak tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms tomcat: security manager bypass via setGlobalContext()

 https://cve.radiocsirt.org/vuln/suse-su-2016:0769-1 SUSE-SU-2016:0769-1 — Security update for tomcat 2026-10-02T20:59:23.512111+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0706 UBUNTU-CVE-2016-0706 2026-10-02T20:59:23.512128+00:00

Affected: Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat6

Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended SecurityManager restrictions and read arbitrary HTTP requests, and consequently discover session ID values, via a crafted web application.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1277 WID-SEC-W-2024-1277 — Oracle Fusion Middleware: Mehrere Schwachstellen 2026-10-02T20:59:23.512150+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.