https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:46:13.578885+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2017-avi-116 certfr-2017-avi-116 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Apache Tomcat</span>. Elles permettent à un att… 2026-10-02T15:46:13.685663+00:00 certfr-2017-avi-116 https://cve.radiocsirt.org/vuln/cnvd-2017-05590 cnvd-2017-05590 2026-10-02T15:46:13.685717+00:00 cnvd-2017-05590 https://cve.radiocsirt.org/vuln/euvd-2026-73530 EUVD-2026-73530 2026-10-02T15:46:13.685734+00:00 EUVD-2026-73530 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5648 fkie_cve-2017-5648 2026-10-02T15:46:13.685758+00:00

While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was therefore possible for that untrusted application to retain a reference to the request or response object and thereby access and/or modify information associated with another web application.

 https://cve.radiocsirt.org/vuln/ghsa-3vx3-xf6q-r5xp GHSA-3vx3-xf6q-r5xp — Exposure of Resource to Wrong Sphere in Apache Tomcat 2026-10-02T15:46:13.685807+00:00

Affected: Maven: org.apache.tomcat:tomcat-catalina, Maven: org.apache.tomcat.embed:tomcat-embed-core

While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was therefore possible for that untrusted application to retain a reference to the request or response object and thereby access and/or modify information associated with another web application.

 https://cve.radiocsirt.org/vuln/gsd-2017-5648 gsd-2017-5648 2026-10-02T15:46:13.685862+00:00 gsd-2017-5648 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11468-1 openSUSE-SU-2024:11468-1 — tomcat-9.0.36-8.4 on GA media 2026-10-02T15:46:13.685881+00:00

tomcat-9.0.36-8.4 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2017:1801 RHSA-2017:1801 — Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 Service Pack 1 security update 2026-10-02T15:46:13.685926+00:00

openssl: OCSP Status Request extension unbounded memory growth openssl: ECDSA P-256 timing attack key recovery SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS log4j: Socket receiver deserialization vulnerability tomcat: Incorrect handling of pipelined requests when send file was used tomcat: Calls to application listeners did not use the appropriate facade object tomcat: Security constrained bypass in error page mechanism tomcat: Vary header not added by CORS filter leading to cache poisoning log4j: deserialization of untrusted data in SocketServer

 https://cve.radiocsirt.org/vuln/suse-su-2017:1229-1 SUSE-SU-2017:1229-1 — Security update for tomcat 2026-10-02T15:46:13.685979+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-5648 UBUNTU-CVE-2017-5648 2026-10-02T15:46:13.686005+00:00

Affected: Ubuntu:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat8, Ubuntu:Pro:16.04:LTS: tomcat7

While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was therefore possible for that untrusted application to retain a reference to the request or response object and thereby access and/or modify information associated with another web application.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0528 WID-SEC-W-2024-0528 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-02T15:46:13.686049+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Berechtigungen zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.