https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:54:57.176541+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2019:1529 ALSA-2019:1529 — Important: pki-deps:10.6 security update 2026-10-02T13:54:57.209111+00:00

Affected: AlmaLinux:8: apache-commons-collections, AlmaLinux:8: apache-commons-lang, AlmaLinux:8: bea-stax-api, AlmaLinux:8: glassfish-fastinfoset, AlmaLinux:8: glassfish-jaxb-api, AlmaLinux:8: glassfish-jaxb-core, AlmaLinux:8: glassfish-jaxb-runtime, AlmaLinux:8: glassfish-jaxb-txw2, AlmaLinux:8: jackson-module-jaxb-annotations, AlmaLinux:8: jakarta-commons-httpclient and 15 more

The Public Key Infrastructure (PKI) Deps module contains fundamental packages required as dependencies for the pki-core module by AlmaLinux Certificate System.

Security Fix(es):

* tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up (CVE-2018-8037)

* tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins (CVE-2018-8014)

* tomcat: Open redirect in default servlet (CVE-2018-11784)

* tomcat: Host name verification missing in WebSocket client (CVE-2018-8034)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2019-01767 bdu:2019-01767 2026-10-02T13:54:57.209231+00:00 bdu:2019-01767 https://cve.radiocsirt.org/vuln/certfr-2019-avi-024 certfr-2019-avi-024 — De multiples vulnérabilités ont été découvertes dans Oracle Virtualization. Certaines d'entre elles permettent à un att… 2026-10-02T13:54:57.209249+00:00 certfr-2019-avi-024 https://cve.radiocsirt.org/vuln/cnvd-2018-20302 cnvd-2018-20302 2026-10-02T13:54:57.209265+00:00 cnvd-2018-20302 https://cve.radiocsirt.org/vuln/euvd-2026-165239 EUVD-2026-165239 2026-10-02T13:54:57.209276+00:00 EUVD-2026-165239 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11784 fkie_cve-2018-11784 2026-10-02T13:54:57.209287+00:00

When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.

 https://cve.radiocsirt.org/vuln/ghsa-5q99-f34m-67gc GHSA-5q99-f34m-67gc — Apache Tomcat Open Redirect vulnerability 2026-10-02T13:54:57.209310+00:00

Affected: Maven: org.apache.tomcat.embed:tomcat-embed-core

When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.

 https://cve.radiocsirt.org/vuln/gsd-2018-11784 gsd-2018-11784 2026-10-02T13:54:57.209345+00:00 gsd-2018-11784 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1547-1 openSUSE-SU-2019:1547-1 — Security update for virtualbox 2026-10-02T13:54:57.209356+00:00

Security update for virtualbox

 https://cve.radiocsirt.org/vuln/rhsa-2018:2867 RHSA-2018:2867 — Red Hat Security Advisory: Red Hat JBoss Web Server 5.0 Service Pack 1 security and bug fix update 2026-10-02T13:54:57.209388+00:00

tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up tomcat: Open redirect in default servlet

 https://cve.radiocsirt.org/vuln/suse-su-2018:3261-1 SUSE-SU-2018:3261-1 — Security update for tomcat 2026-10-02T13:54:57.209405+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11784 UBUNTU-CVE-2018-11784 2026-10-02T13:54:57.209420+00:00

Affected: Ubuntu:14.04:LTS: tomcat7, Ubuntu:Pro:14.04:LTS: tomcat6, Ubuntu:16.04:LTS: tomcat8, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:18.04:LTS: tomcat8

When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0460 WID-SEC-W-2023-0460 — Apache Tomcat: Schwachstelle ermöglicht Manipulation von Dateien 2026-10-02T13:54:57.209445+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um Dateien zu manipulieren.