https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:07:52.792821+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-tomcat-2020-17527 BIT-tomcat-2020-17527 — Apache Tomcat: Request header mix-up between HTTP/2 streams 2026-10-03T19:07:52.844328+00:00

Affected: Bitnami: tomcat

While investigating bug 64830 it was discovered that Apache Tomcat 9.0.0 through 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-792 certfr-2020-avi-792 — Une vulnérabilité a été découverte dans Apache Tomcat. Elle permet à un attaquant de provoquer une atteinte à la confid… 2026-10-03T19:07:52.844383+00:00 certfr-2020-avi-792 https://cve.radiocsirt.org/vuln/euvd-2026-215932 EUVD-2026-215932 2026-10-03T19:07:52.844403+00:00 EUVD-2026-215932 https://cve.radiocsirt.org/vuln/fkie_cve-2020-17527 fkie_cve-2020-17527 2026-10-03T19:07:52.844416+00:00

While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.

 https://cve.radiocsirt.org/vuln/ghsa-vvw4-rfwf-p6hx GHSA-vvw4-rfwf-p6hx — Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 2026-10-03T19:07:52.844438+00:00

Affected: Maven: org.apache.tomcat:tomcat-coyote

While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.

 https://cve.radiocsirt.org/vuln/gsd-2020-17527 gsd-2020-17527 2026-10-03T19:07:52.844462+00:00 gsd-2020-17527 https://cve.radiocsirt.org/vuln/msrc_cve-2020-17527 msrc_CVE-2020-17527 — Apache Tomcat: Request header mix-up between HTTP/2 streams 2026-10-03T19:07:52.844473+00:00 msrc_CVE-2020-17527 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0043-1 openSUSE-SU-2021:0043-1 — Security update for tomcat 2026-10-03T19:07:52.844488+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/rhsa-2021:0494 RHSA-2021:0494 — Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update 2026-10-03T19:07:52.844509+00:00

openssl: EDIPARTYNAME NULL pointer de-reference tomcat: Apache Tomcat HTTP/2 Request mix-up tomcat: HTTP/2 request header mix-up tomcat: Information disclosure when using NTFS file system

 https://cve.radiocsirt.org/vuln/suse-su-2021:0031-1 SUSE-SU-2021:0031-1 — Security update for tomcat 2026-10-03T19:07:52.844551+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-17527 UBUNTU-CVE-2020-17527 2026-10-03T19:07:52.844581+00:00

Affected: Ubuntu:18.04:LTS: tomcat9, Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:20.04:LTS: tomcat9

While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0065 WID-SEC-W-2023-0065 — Oracle MySQL: Mehrere Schwachstellen 2026-10-03T19:07:52.844602+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.