https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:18:25.697058+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-568 certfr-2022-avi-568 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T22:18:25.956355+00:00 certfr-2022-avi-568 https://cve.radiocsirt.org/vuln/cnvd-2016-10423 cnvd-2016-10423 2026-10-02T22:18:25.956402+00:00 cnvd-2016-10423 https://cve.radiocsirt.org/vuln/euvd-2026-184036 EUVD-2026-184036 2026-10-02T22:18:25.956418+00:00 EUVD-2026-184036 https://cve.radiocsirt.org/vuln/fkie_cve-2016-6796 fkie_cve-2016-6796 2026-10-02T22:18:25.956430+00:00

A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.

 https://cve.radiocsirt.org/vuln/ghsa-3mjp-p938-4329 GHSA-3mjp-p938-4329 — Apache Tomcat vulnerable to SecurityManager bypass 2026-10-02T22:18:25.956457+00:00

Affected: Maven: org.apache.tomcat:tomcat

A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.

 https://cve.radiocsirt.org/vuln/gsd-2016-6796 gsd-2016-6796 2026-10-02T22:18:25.956484+00:00 gsd-2016-6796 https://cve.radiocsirt.org/vuln/rhsa-2017:0455 RHSA-2017:0455 — Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 security and enhancement update 2026-10-02T22:18:25.956510+00:00

tomcat: timing attack in Realm implementation tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalation tomcat: Usage of vulnerable FileUpload package can result in denial of service tomcat: security manager bypass via IntrospectHelper utility function tomcat: tomcat writable config files allow privilege escalation tomcat: system property disclosure tomcat: security manager bypass via JSP Servlet config parameters tomcat: unrestricted access to global resources tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests tomcat: Remote code execution vulnerability in JmxRemoteLifecycleListener tomcat: information disclosure due to incorrect Processor sharing

 https://cve.radiocsirt.org/vuln/rhsa-2017:2247 RHSA-2017:2247 — Red Hat Security Advisory: tomcat security, bug fix, and enhancement update 2026-10-02T22:18:25.956612+00:00

tomcat: timing attack in Realm implementation tomcat: security manager bypass via IntrospectHelper utility function tomcat: system property disclosure tomcat: security manager bypass via JSP Servlet config parameters tomcat: unrestricted access to global resources

 https://cve.radiocsirt.org/vuln/suse-su-2016:3079-1 SUSE-SU-2016:3079-1 — Security update for tomcat 2026-10-02T22:18:25.956636+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-6796 UBUNTU-CVE-2016-6796 2026-10-02T22:18:25.956654+00:00

Affected: Ubuntu:14.04:LTS: tomcat7, Ubuntu:Pro:14.04:LTS: tomcat6, Ubuntu:16.04:LTS: tomcat6, Ubuntu:16.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat8

A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.