https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:47:28.703692+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2017-01545 bdu:2017-01545 2026-10-02T13:47:28.878887+00:00 bdu:2017-01545 https://cve.radiocsirt.org/vuln/certfr-2017-avi-370 certfr-2017-avi-370 — De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoqu… 2026-10-02T13:47:28.878925+00:00 certfr-2017-avi-370 https://cve.radiocsirt.org/vuln/cnvd-2016-11583 cnvd-2016-11583 2026-10-02T13:47:28.878953+00:00 cnvd-2016-11583 https://cve.radiocsirt.org/vuln/euvd-2026-256348 EUVD-2026-256348 2026-10-02T13:47:28.878965+00:00 EUVD-2026-256348 https://cve.radiocsirt.org/vuln/fkie_cve-2016-8735 fkie_cve-2016-8735 2026-10-02T13:47:28.878976+00:00

Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.

 https://cve.radiocsirt.org/vuln/ghsa-cw54-59pw-4g8c GHSA-cw54-59pw-4g8c — Apache Tomcat Improper Access Control vulnerability 2026-10-02T13:47:28.879005+00:00

Affected: Maven: org.apache.tomcat:tomcat-catalina-jmx-remote, Maven: org.apache.tomcat:tomcat-catalina

Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.

 https://cve.radiocsirt.org/vuln/gsd-2016-8735 gsd-2016-8735 2026-10-02T13:47:28.879039+00:00 gsd-2016-8735 https://cve.radiocsirt.org/vuln/rhsa-2017:0455 RHSA-2017:0455 — Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 security and enhancement update 2026-10-02T13:47:28.879051+00:00

tomcat: timing attack in Realm implementation tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalation tomcat: Usage of vulnerable FileUpload package can result in denial of service tomcat: security manager bypass via IntrospectHelper utility function tomcat: tomcat writable config files allow privilege escalation tomcat: system property disclosure tomcat: security manager bypass via JSP Servlet config parameters tomcat: unrestricted access to global resources tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests tomcat: Remote code execution vulnerability in JmxRemoteLifecycleListener tomcat: information disclosure due to incorrect Processor sharing

 https://cve.radiocsirt.org/vuln/suse-su-2016:3079-1 SUSE-SU-2016:3079-1 — Security update for tomcat 2026-10-02T13:47:28.879086+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-8735 UBUNTU-CVE-2016-8735 2026-10-02T13:47:28.879105+00:00

Affected: Ubuntu:14.04:LTS: tomcat7, Ubuntu:Pro:14.04:LTS: tomcat6, Ubuntu:16.04:LTS: tomcat6, Ubuntu:16.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat8

Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen 2026-10-02T13:47:28.879133+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.