https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:52:15.734976+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2017-avi-314 certfr-2017-avi-314 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Apache Tomcat</span>. Elles permettent à un att… 2026-10-02T20:52:15.861322+00:00 certfr-2017-avi-314 https://cve.radiocsirt.org/vuln/cnvd-2017-27471 cnvd-2017-27471 2026-10-02T20:52:15.861368+00:00 cnvd-2017-27471 https://cve.radiocsirt.org/vuln/euvd-2026-169138 EUVD-2026-169138 2026-10-02T20:52:15.861391+00:00 EUVD-2026-169138 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12616 fkie_cve-2017-12616 2026-10-02T20:52:15.861405+00:00

When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.

 https://cve.radiocsirt.org/vuln/ghsa-8qq4-8jvq-mfw4 GHSA-8qq4-8jvq-mfw4 — Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 2026-10-02T20:52:15.861432+00:00

Affected: Maven: org.apache.tomcat:tomcat-catalina

When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.

 https://cve.radiocsirt.org/vuln/gsd-2017-12616 gsd-2017-12616 2026-10-02T20:52:15.861455+00:00 gsd-2017-12616 https://cve.radiocsirt.org/vuln/rhsa-2018:0465 RHSA-2018:0465 — Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 Service Pack 2 security update 2026-10-02T20:52:15.861466+00:00

apr: Out-of-bounds array deref in apr_time_exp*() functions tomcat: Remote Code Execution via JSP Upload tomcat: Information Disclosure when using VirtualDirContext tomcat: Remote Code Execution bypass for CVE-2017-12615 tomcat-native: Mishandling of client certificates can allow for OCSP check bypass tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources tomcat: Late application of security constraints can lead to resource exposure for unauthorised users

 https://cve.radiocsirt.org/vuln/suse-su-2017:3059-1 SUSE-SU-2017:3059-1 — Security update for tomcat 2026-10-02T20:52:15.861492+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12616 UBUNTU-CVE-2017-12616 2026-10-02T20:52:15.861509+00:00

Affected: Ubuntu:14.04:LTS: tomcat7, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:Pro:18.04:LTS: tomcat7

When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1238 WID-SEC-W-2024-1238 — HPE HP-UX: Mehrere Schwachstellen 2026-10-02T20:52:15.861530+00:00

Ein anonymer oder lokaler Angreifer kann mehrere Schwachstellen in HPE HP-UX Tomcat Servlet Engine ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.