https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:53:14.688082+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-04405 bdu:2019-04405 2026-10-02T13:53:14.695360+00:00 bdu:2019-04405 https://cve.radiocsirt.org/vuln/certfr-2019-avi-170 certfr-2019-avi-170 — Une vulnérabilité a été découverte dans Apache Tomcat. Elle permet à un attaquant de provoquer une exécution de code ar… 2026-10-02T13:53:14.695393+00:00 certfr-2019-avi-170 https://cve.radiocsirt.org/vuln/cnvd-2019-09856 cnvd-2019-09856 2026-10-02T13:53:14.695411+00:00 cnvd-2019-09856 https://cve.radiocsirt.org/vuln/euvd-2026-48397 EUVD-2026-48397 2026-10-02T13:53:14.695423+00:00 EUVD-2026-48397 https://cve.radiocsirt.org/vuln/fkie_cve-2019-0232 fkie_cve-2019-0232 2026-10-02T13:53:14.695433+00:00

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by default. The CGI option enableCmdLineArguments is disable by default in Tomcat 9.0.x (and will be disabled by default in all versions in response to this vulnerability). For a detailed explanation of the JRE behaviour, see Markus Wulftange's blog (https://codewhitesec.blogspot.com/2016/02/java-and-command-line-injections-in-windows.html) and this archived MSDN blog (https://web.archive.org/web/20161228144344/https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/).

 https://cve.radiocsirt.org/vuln/ghsa-8vmx-qmch-mpqg GHSA-8vmx-qmch-mpqg — Apache Tomcat OS Command Injection vulnerability 2026-10-02T13:53:14.695464+00:00

Affected: Maven: org.apache.tomcat.embed:tomcat-embed-core

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by default. The CGI option enableCmdLineArguments is disable by default in Tomcat 9.0.x (and will be disabled by default in all versions in response to this vulnerability). For a detailed explanation of the JRE behaviour, see Markus Wulftange's blog (https://codewhitesec.blogspot.com/2016/02/java-and-command-line-injections-in-windows.html) and this archived MSDN blog (https://web.archive.org/web/20161228144344/https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/).

 https://cve.radiocsirt.org/vuln/gsd-2019-0232 gsd-2019-0232 2026-10-02T13:53:14.695493+00:00 gsd-2019-0232 https://cve.radiocsirt.org/vuln/rhsa-2019:1712 RHSA-2019:1712 — Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 7 security and bug fix update 2026-10-02T13:53:14.695504+00:00

openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service tomcat: Remote Code Execution on Windows

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0528 WID-SEC-W-2024-0528 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-02T13:53:14.695523+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Berechtigungen zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.