https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T22:46:56.544439+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-10290 bdu:2024-10290 2026-10-04T22:46:56.754697+00:00 bdu:2024-10290 https://cve.radiocsirt.org/vuln/bit-tomcat-2024-52318 BIT-tomcat-2024-52318 — Apache Tomcat: Incorrect JSP tag recycling leads to XSS 2026-10-04T22:46:56.754744+00:00

Affected: Bitnami: tomcat

Incorrect object recycling and reuse vulnerability in Apache Tomcat.

This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96.

Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1000 certfr-2024-avi-1000 — De multiples vulnérabilités ont été découvertes dans les produits Apache. Certaines d'entre elles permettent à un attaq… 2026-10-04T22:46:56.754782+00:00 certfr-2024-avi-1000 https://cve.radiocsirt.org/vuln/euvd-2026-212958 EUVD-2026-212958 2026-10-04T22:46:56.754801+00:00 EUVD-2026-212958 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52318 fkie_cve-2024-52318 2026-10-04T22:46:56.754813+00:00

Incorrect object recycling and reuse vulnerability in Apache Tomcat.

This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96.

Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-f632-9449-3j4w GHSA-f632-9449-3j4w — Apache Tomcat - XSS in generated JSPs 2026-10-04T22:46:56.754837+00:00

Affected: Maven: org.apache.tomcat:tomcat-jasper, Maven: org.apache.tomcat.embed:tomcat-embed-jasper, Maven: org.apache.tomcat:tomcat

# Description: The fix for improvement 69333 caused pooled JSP tags not to be released after use which in turn could cause output of some tags not to escaped as expected. This unescaped output could lead to XSS.

# Versions Affected: - Apache Tomcat 11.0.0 - Apache Tomcat 10.1.31 - Apache Tomcat 9.0.96

# Mitigation: Users of the affected versions should apply one of the following mitigations: - Upgrade to Apache Tomcat 11.0.1 or later - Upgrade to Apache Tomcat 10.1.33 or later Note: 10.1.32 was not released - Upgrade to Apache Tomcat 9.0.97 or later

 https://cve.radiocsirt.org/vuln/oesa-2024-2460 OESA-2024-2460 — tomcat security update 2026-10-04T22:46:56.754871+00:00

Affected: openEuler:24.03-LTS: tomcat

The Apache Tomcat software is developed in an open and participatory environment and released under the Apache License version 2. The Apache Tomcat project is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open development project Security Fix(es): The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47 onwards exposed a long standing (but extremely hard to trigger) concurrency bug in Apache Tomcat 10.1.0 to 10.1.0-M12, 10.0.0-M1 to 10.0.18, 9.0.0-M1 to 9.0.60 and 8.5.0 to 8.5.77 that could cause client connections to share an Http11Processor instance resulting in responses, or part responses, to be received by the wrong client.(CVE-2021-43980) If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that the application will continue to use the socket after it has been closed. The error handling triggered in this case could cause the a pooled object to be placed in the pool twice. This could result in subsequent connections using the same object concurrently which could result in data being returned to the wrong use and/or other errors.(CVE-2022-25762) The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as e…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-52318 Withdrawn: UBUNTU-CVE-2024-52318 2026-10-04T22:46:56.754912+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: tomcat6, Ubuntu:Pro:14.04:LTS: tomcat7, Ubuntu:Pro:16.04:LTS: tomcat8, Ubuntu:Pro:16.04:LTS: tomcat6, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:Pro:18.04:LTS: tomcat7, Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:Pro:18.04:LTS: tomcat9, Ubuntu:Pro:20.04:LTS: tomcat9, Ubuntu:22.04:LTS: tomcat9 and 3 more

Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96. Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3495 WID-SEC-W-2024-3495 — Apache Tomcat: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-04T22:46:56.754951+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.