https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:07:27.070241+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-01021 bdu:2020-01021 2026-10-02T15:07:27.353957+00:00 bdu:2020-01021 https://cve.radiocsirt.org/vuln/certfr-2020-avi-034 certfr-2020-avi-034 — De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Certaines d'entre elles permettent à un at… 2026-10-02T15:07:27.354001+00:00 certfr-2020-avi-034 https://cve.radiocsirt.org/vuln/euvd-2026-48403 EUVD-2026-48403 2026-10-02T15:07:27.354021+00:00 EUVD-2026-48403 https://cve.radiocsirt.org/vuln/fkie_cve-2019-0221 fkie_cve-2019-0221 2026-10-02T15:07:27.354033+00:00

The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a production website.

 https://cve.radiocsirt.org/vuln/ghsa-jjpq-gp5q-8q6w GHSA-jjpq-gp5q-8q6w — Cross-site scripting in Apache Tomcat 2026-10-02T15:07:27.354060+00:00

Affected: Maven: org.apache.tomcat.embed:tomcat-embed-core, Maven: org.apache.tomcat:tomcat-catalina, Maven: org.apache.tomcat:tomcat

The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a production website.

 https://cve.radiocsirt.org/vuln/gsd-2019-0221 gsd-2019-0221 2026-10-02T15:07:27.354091+00:00 gsd-2019-0221 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1673-1 openSUSE-SU-2019:1673-1 — Security update for tomcat 2026-10-02T15:07:27.354102+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/rhsa-2019:3929 RHSA-2019:3929 — Red Hat Security Advisory: Red Hat JBoss Web Server 5.2 security release 2026-10-02T15:07:27.354120+00:00

openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) tomcat: Apache Tomcat HTTP/2 DoS tomcat: XSS in SSI printenv tomcat: Remote Code Execution on Windows openssl: 0-byte record padding oracle tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199

 https://cve.radiocsirt.org/vuln/suse-su-2019:1693-1 SUSE-SU-2019:1693-1 — Security update for tomcat 2026-10-02T15:07:27.354145+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-0221 UBUNTU-CVE-2019-0221 2026-10-02T15:07:27.354159+00:00

Affected: Ubuntu:Pro:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat8, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:18.04:LTS: tomcat8, Ubuntu:18.04:LTS: tomcat9, Ubuntu:Pro:18.04:LTS: tomcat7

The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a production website.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1994 WID-SEC-W-2023-1994 — Apache Tomcat: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-02T15:07:27.354185+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.