https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:44:49.794204+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01808 bdu:2021-01808 2026-10-03T02:44:50.084542+00:00 bdu:2021-01808 https://cve.radiocsirt.org/vuln/bit-tomcat-2021-25329 BIT-tomcat-2021-25329 — Incomplete fix for CVE-2020-9484 2026-10-03T02:44:50.084602+00:00

Affected: Bitnami: tomcat

The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0 to 10.0.0, 9.0.0 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the previously published prerequisites for CVE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to this issue.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-164 certfr-2021-avi-164 — De multiples vulnérabilités ont été découvertes dans Apache Tomcat. Elles permettent à un attaquant de provoquer une ex… 2026-10-03T02:44:50.084657+00:00 certfr-2021-avi-164 https://cve.radiocsirt.org/vuln/euvd-2026-215951 EUVD-2026-215951 2026-10-03T02:44:50.084686+00:00 EUVD-2026-215951 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25329 fkie_cve-2021-25329 2026-10-03T02:44:50.084706+00:00

The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the previously published prerequisites for CVE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to this issue.

 https://cve.radiocsirt.org/vuln/ghsa-jgwr-3qm3-26f3 GHSA-jgwr-3qm3-26f3 — Potential remote code execution in Apache Tomcat 2026-10-03T02:44:50.084740+00:00

Affected: Maven: org.apache.tomcat.embed:tomcat-embed-core

The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the previously published prerequisites for CVE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to this issue.

 https://cve.radiocsirt.org/vuln/gsd-2021-25329 gsd-2021-25329 2026-10-03T02:44:50.084785+00:00 gsd-2021-25329 https://cve.radiocsirt.org/vuln/oesa-2021-1117 OESA-2021-1117 — tomcat security update 2026-10-03T02:44:50.084813+00:00

Affected: openEuler:20.03-LTS-SP1: tomcat

The Apache Tomcat software is developed in an open and participatory environment and released under the Apache License version 2. The Apache Tomcat project is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open development project Security Fix(es): The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the previously published prerequisites for CVE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to this issue.(CVE-2021-25329) When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results of user A's request.(CVE-2021-25122)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0496-1 openSUSE-SU-2021:0496-1 — Security update for tomcat 2026-10-03T02:44:50.084880+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/rhsa-2021:2561 RHSA-2021:2561 — Red Hat Security Advisory: Red Hat JBoss Web Server 5.5.0 Security release 2026-10-03T02:44:50.084919+00:00

hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used tomcat: Request mix-up with h2c tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence)

 https://cve.radiocsirt.org/vuln/suse-su-2021:0988-1 SUSE-SU-2021:0988-1 — Security update for tomcat 2026-10-03T02:44:50.084958+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-25329 UBUNTU-CVE-2021-25329 2026-10-03T02:44:50.084989+00:00

Affected: Ubuntu:Pro:14.04:LTS: tomcat7, Ubuntu:Pro:14.04:LTS: tomcat6, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:Pro:16.04:LTS: tomcat8, Ubuntu:18.04:LTS: tomcat9, Ubuntu:Pro:18.04:LTS: tomcat7, Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:20.04:LTS: tomcat9

The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the previously published prerequisites for CVE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0607 WID-SEC-W-2022-0607 — Red Hat FUSE: Mehrere Schwachstellen 2026-10-03T02:44:50.085043+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.