https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:11:21.112360+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-01971 bdu:2020-01971 2026-10-02T16:11:21.431526+00:00 bdu:2020-01971 https://cve.radiocsirt.org/vuln/certfr-2019-avi-643 certfr-2019-avi-643 — De multiples vulnérabilités ont été découvertes dans Apache Tomcat. Elles permettent à un attaquant de provoquer un con… 2026-10-02T16:11:21.431572+00:00 certfr-2019-avi-643 https://cve.radiocsirt.org/vuln/cnvd-2020-00503 cnvd-2020-00503 2026-10-02T16:11:21.431591+00:00 cnvd-2020-00503 https://cve.radiocsirt.org/vuln/euvd-2026-58407 EUVD-2026-58407 2026-10-02T16:11:21.431604+00:00 EUVD-2026-58407 https://cve.radiocsirt.org/vuln/fkie_cve-2019-17563 fkie_cve-2019-17563 2026-10-02T16:11:21.431615+00:00

When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session fixation attack. The window was considered too narrow for an exploit to be practical but, erring on the side of caution, this issue has been treated as a security vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-9xcj-c8cr-8c3c GHSA-9xcj-c8cr-8c3c — In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fi… 2026-10-02T16:11:21.431644+00:00

Affected: Maven: org.apache.tomcat.embed:tomcat-embed-core

When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session fixation attack. The window was considered too narrow for an exploit to be practical but, erring on the side of caution, this issue has been treated as a security vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2019-17563 gsd-2019-17563 2026-10-02T16:11:21.431671+00:00 gsd-2019-17563 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0038-1 openSUSE-SU-2020:0038-1 — Security update for tomcat 2026-10-02T16:11:21.431683+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/rhsa-2020:0860 RHSA-2020:0860 — Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 8 security update 2026-10-02T16:11:21.431702+00:00

tomcat: XSS in SSI printenv tomcat: local privilege escalation tomcat: Session fixation when using FORM authentication tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability

 https://cve.radiocsirt.org/vuln/suse-su-2020:0029-1 SUSE-SU-2020:0029-1 — Security update for tomcat 2026-10-02T16:11:21.431724+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-17563 UBUNTU-CVE-2019-17563 2026-10-02T16:11:21.431740+00:00

Affected: Ubuntu:Pro:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat8, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:Pro:18.04:LTS: tomcat9

When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session fixation attack. The window was considered too narrow for an exploit to be practical but, erring on the side of caution, this issue has been treated as a security vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1049 WID-SEC-W-2023-1049 — Oracle MySQL: Mehrere Schwachstellen 2026-10-02T16:11:21.431766+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.