https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:31:13.095236+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2007-avi-340 certa-2007-avi-340 — Plusieurs vulnérabilités ont été identifiées : elles concernent le système d'exploitation Mac OS X. L'exploitation de c… 2026-10-03T23:31:13.249208+00:00 certa-2007-avi-340 https://cve.radiocsirt.org/vuln/euvd-2026-133354 EUVD-2026-133354 2026-10-03T23:31:13.249271+00:00 EUVD-2026-133354 https://cve.radiocsirt.org/vuln/fkie_cve-2007-1358 fkie_cve-2007-1358 2026-10-03T23:31:13.249288+00:00

Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616".

 https://cve.radiocsirt.org/vuln/ghsa-xmc9-6p56-3c4v GHSA-xmc9-6p56-3c4v — Apache Tomcat XSS In Accept-Language Headers 2026-10-03T23:31:13.249322+00:00

Affected: Maven: org.apache.tomcat:tomcat

Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616".

 https://cve.radiocsirt.org/vuln/gsd-2007-1358 gsd-2007-1358 2026-10-03T23:31:13.249350+00:00 gsd-2007-1358 https://cve.radiocsirt.org/vuln/jvndb-2007-000297 jvndb-2007-000297 2026-10-03T23:31:13.249362+00:00

Apache Tomcat from the Apache Software Foundation contains a cross-site scripting vulnerability in the Accept-Language header handling. Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page (JSP) technologies. Apache Tomcat contains a cross-site scripting vulnerability. It occurs when the value of the Accept-Language header sent from a client is non-standard. The vendor has confirmed that this vulnerability occurs when an outdated version of Flash is used.

 https://cve.radiocsirt.org/vuln/rhsa-2007:0326 RHSA-2007:0326 — Red Hat Security Advisory: tomcat security update 2026-10-03T23:31:13.249382+00:00

tomcat multiple content-length header poisioning tomcat directory listing issue tomcat XSS in example webapps tomcat XSS in example webapps tomcat directory traversal tomcat accept-language xss flaw tomcat anonymous cipher issue