https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:04:18.137580+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2017-avi-314 certfr-2017-avi-314 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Apache Tomcat</span>. Elles permettent à un att… 2026-10-03T03:04:18.313544+00:00 certfr-2017-avi-314 https://cve.radiocsirt.org/vuln/cnvd-2017-27472 cnvd-2017-27472 2026-10-03T03:04:18.313592+00:00 cnvd-2017-27472 https://cve.radiocsirt.org/vuln/euvd-2026-348806 EUVD-2026-348806 2026-10-03T03:04:18.313608+00:00 EUVD-2026-348806 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12615 fkie_cve-2017-12615 2026-10-03T03:04:18.313620+00:00

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

 https://cve.radiocsirt.org/vuln/ghsa-pjfr-qf3p-3q25 GHSA-pjfr-qf3p-3q25 — When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server 2026-10-03T03:04:18.313650+00:00

Affected: Maven: org.apache.tomcat.embed:tomcat-embed-core

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

 https://cve.radiocsirt.org/vuln/gsd-2017-12615 gsd-2017-12615 2026-10-03T03:04:18.313676+00:00 gsd-2017-12615 https://cve.radiocsirt.org/vuln/rhsa-2017:3080 RHSA-2017:3080 — Red Hat Security Advisory: tomcat6 security update 2026-10-03T03:04:18.313688+00:00

tomcat: Incorrect handling of pipelined requests when send file was used tomcat: Security constrained bypass in error page mechanism tomcat: Remote Code Execution via JSP Upload tomcat: Remote Code Execution bypass for CVE-2017-12615

 https://cve.radiocsirt.org/vuln/rhsa-2017:3081 RHSA-2017:3081 — Red Hat Security Advisory: tomcat security update 2026-10-03T03:04:18.313712+00:00

tomcat: Incorrect handling of pipelined requests when send file was used tomcat: Vary header not added by CORS filter leading to cache poisoning tomcat: Remote Code Execution via JSP Upload tomcat: Remote Code Execution bypass for CVE-2017-12615

 https://cve.radiocsirt.org/vuln/suse-su-2017:3059-1 SUSE-SU-2017:3059-1 — Security update for tomcat 2026-10-03T03:04:18.313746+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0423 WID-SEC-W-2025-0423 — Apache Tomcat: Mehrere Schwachstellen 2026-10-03T03:04:18.313765+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmechanismen zu umgehen oder Informationen offenzulegen.