https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:45:13.481431+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-04938 bdu:2020-04938 2026-10-04T08:45:13.715976+00:00 bdu:2020-04938 https://cve.radiocsirt.org/vuln/bit-tomcat-2020-13935 BIT-tomcat-2020-13935 2026-10-04T08:45:13.716023+00:00

Affected: Bitnami: tomcat

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 9.0.0 through 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-626 certfr-2020-avi-626 — De multiples vulnérabilités ont été découvertes dans Apache Tomcat. Elles permettent à un attaquant de provoquer un dén… 2026-10-04T08:45:13.716057+00:00 certfr-2020-avi-626 https://cve.radiocsirt.org/vuln/cnvd-2020-46230 cnvd-2020-46230 2026-10-04T08:45:13.716074+00:00 cnvd-2020-46230 https://cve.radiocsirt.org/vuln/euvd-2026-42094 EUVD-2026-42094 2026-10-04T08:45:13.716086+00:00 EUVD-2026-42094 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13935 fkie_cve-2020-13935 2026-10-04T08:45:13.716097+00:00

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-m7jv-hq7h-mq7c GHSA-m7jv-hq7h-mq7c — Infinite Loop in Apache Tomcat 2026-10-04T08:45:13.716119+00:00

Affected: Maven: org.apache.tomcat:tomcat, Maven: org.apache.tomcat.embed:tomcat-embed-websocket, Maven: org.apache.tomcat:tomcat-websocket

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2020-13935 gsd-2020-13935 2026-10-04T08:45:13.716151+00:00 gsd-2020-13935 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1102-1 openSUSE-SU-2020:1102-1 — Security update for tomcat 2026-10-04T08:45:13.716163+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/rhsa-2020:3303 RHSA-2020:3303 — Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 10 security update 2026-10-04T08:45:13.716181+00:00

tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS

 https://cve.radiocsirt.org/vuln/suse-su-2020:2037-1 SUSE-SU-2020:2037-1 — Security update for tomcat 2026-10-04T08:45:13.716199+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13935 UBUNTU-CVE-2020-13935 2026-10-04T08:45:13.716214+00:00

Affected: Ubuntu:Pro:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat8, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:Pro:18.04:LTS: tomcat9, Ubuntu:20.04:LTS: tomcat9

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0519 WID-SEC-W-2022-0519 — Apache Tomcat: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-04T08:45:13.716240+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um einen Denial of Service Angriff durchzuführen.