https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T12:59:27.649951+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-tomcat-2020-13943 BIT-tomcat-2020-13943 2026-10-12T12:59:27.696811+00:00

Affected: Bitnami: tomcat

If an HTTP/2 client connecting to Apache Tomcat 9.0.0 through 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-951 certfr-2021-avi-951 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de RedHat. Certaines d'entre elles permettent à un… 2026-10-12T12:59:27.696867+00:00 certfr-2021-avi-951 https://cve.radiocsirt.org/vuln/euvd-2026-42123 EUVD-2026-42123 2026-10-12T12:59:27.696887+00:00 EUVD-2026-42123 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13943 fkie_cve-2020-13943 2026-10-12T12:59:27.696900+00:00

If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.

 https://cve.radiocsirt.org/vuln/ghsa-f268-65qc-98vg GHSA-f268-65qc-98vg — Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 2026-10-12T12:59:27.696922+00:00

Affected: Maven: org.apache.tomcat:tomcat-coyote

If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.

 https://cve.radiocsirt.org/vuln/gsd-2020-13943 gsd-2020-13943 2026-10-12T12:59:27.696947+00:00 gsd-2020-13943 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1799-1 openSUSE-SU-2020:1799-1 — Security update for tomcat 2026-10-12T12:59:27.696958+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/rhsa-2021:0494 RHSA-2021:0494 — Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update 2026-10-12T12:59:27.696973+00:00

openssl: EDIPARTYNAME NULL pointer de-reference tomcat: Apache Tomcat HTTP/2 Request mix-up tomcat: HTTP/2 request header mix-up tomcat: Information disclosure when using NTFS file system

 https://cve.radiocsirt.org/vuln/suse-su-2020:2996-1 SUSE-SU-2020:2996-1 — Security update for tomcat 2026-10-12T12:59:27.696992+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2467 WID-SEC-W-2023-2467 — Apache Tomcat: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-12T12:59:27.697004+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um Informationen offenzulegen.