https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:15:23.982101+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-06115 bdu:2021-06115 2026-10-02T16:15:23.999031+00:00 bdu:2021-06115 https://cve.radiocsirt.org/vuln/bit-tomcat-2021-42340 BIT-tomcat-2021-42340 — DoS via memory leak with WebSocket connections 2026-10-02T16:15:23.999068+00:00

Affected: Bitnami: tomcat

The fix for bug 63362 present in Apache Tomcat 10.1.0 to 10.1.0, 10.0.0 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-386 certfr-2022-avi-386 — De multiples vulnérabilités ont été découvertes dans IBM QRadar SIEM. Certaines d'entre elles permettent à un attaquant… 2026-10-02T16:15:23.999101+00:00 certfr-2022-avi-386 https://cve.radiocsirt.org/vuln/euvd-2026-32118 EUVD-2026-32118 2026-10-02T16:15:23.999118+00:00 EUVD-2026-32118 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42340 fkie_cve-2021-42340 2026-10-02T16:15:23.999129+00:00

The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.

 https://cve.radiocsirt.org/vuln/ghsa-wph7-x527-w3h5 GHSA-wph7-x527-w3h5 — Missing Release of Resource after Effective Lifetime in Apache Tomcat 2026-10-02T16:15:23.999150+00:00

Affected: Maven: org.apache.tomcat:tomcat

The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.

 https://cve.radiocsirt.org/vuln/gsd-2021-42340 gsd-2021-42340 2026-10-02T16:15:23.999173+00:00 gsd-2021-42340 https://cve.radiocsirt.org/vuln/oesa-2021-1413 OESA-2021-1413 — tomcat security update 2026-10-02T16:15:23.999184+00:00

Affected: openEuler:20.03-LTS-SP1: tomcat, openEuler:20.03-LTS-SP2: tomcat

The Apache Tomcat software is developed in an open and participatory environment and released under the Apache License version 2. The Apache Tomcat project is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open development project Security Fix(es): The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.(CVE-2021-42340)

 https://cve.radiocsirt.org/vuln/rhba-2022:8077 RHBA-2022:8077 — Red Hat Bug Fix Advisory: pki-servlet-engine bug fix and enhancement update 2026-10-02T16:15:23.999207+00:00

tomcat: OutOfMemoryError caused by HTTP upgrade connection leak could lead to DoS

 https://cve.radiocsirt.org/vuln/rhsa-2021:4861 RHSA-2021:4861 — Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.0 Security release 2026-10-02T16:15:23.999237+00:00

openssl: Read buffer overruns processing ASN.1 strings openssl: integer overflow in CipherUpdate openssl: NULL pointer dereference in X509_issuer_and_serial_hash() tomcat: JNDI realm authentication weakness tomcat: HTTP request smuggling when used with a reverse proxy tomcat: OutOfMemoryError caused by HTTP upgrade connection leak could lead to DoS

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-42340 Withdrawn: UBUNTU-CVE-2021-42340 2026-10-02T16:15:23.999257+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:16.04:LTS: tomcat8, Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:Pro:18.04:LTS: tomcat9, Ubuntu:Pro:20.04:LTS: tomcat9, Ubuntu:22.04:LTS: tomcat9, Ubuntu:24.04:LTS: tomcat9, Ubuntu:25.04: tomcat9

The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0169 WID-SEC-W-2022-0169 — Oracle MySQL: Mehrere Schwachstellen 2026-10-02T16:15:23.999302+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.