https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:43:15.764085+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2007-avi-362 certa-2007-avi-362 — Plusieurs vulnérabilités du moteur de <span class="textit">servlets</span> <span class="textit">Tomcat</span> permetten… 2026-10-03T12:43:15.922528+00:00 certa-2007-avi-362 https://cve.radiocsirt.org/vuln/euvd-2026-135257 EUVD-2026-135257 2026-10-03T12:43:15.922608+00:00 EUVD-2026-135257 https://cve.radiocsirt.org/vuln/fkie_cve-2007-3382 fkie_cve-2007-3382 2026-10-03T12:43:15.922673+00:00

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks.

 https://cve.radiocsirt.org/vuln/ghsa-qff8-g48j-pwpw GHSA-qff8-g48j-pwpw — Apache Tomcat treats single quotes as delimiters in cookies 2026-10-03T12:43:15.922722+00:00

Affected: Maven: org.apache.tomcat:tomcat

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes (`'`) as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks.

 https://cve.radiocsirt.org/vuln/gsd-2007-3382 gsd-2007-3382 2026-10-03T12:43:15.922775+00:00 gsd-2007-3382 https://cve.radiocsirt.org/vuln/rhsa-2007:0871 RHSA-2007:0871 — Red Hat Security Advisory: tomcat security update 2026-10-03T12:43:15.922791+00:00

tomcat handling of cookies tomcat handling of cookie values tomcat host manager xss