https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:31:00.981367+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-00615 bdu:2016-00615 2026-10-03T10:31:01.322312+00:00 bdu:2016-00615 https://cve.radiocsirt.org/vuln/certfr-2016-avi-350 certfr-2016-avi-350 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle Linux and Virtualization</span>. Certain… 2026-10-03T10:31:01.322374+00:00 certfr-2016-avi-350 https://cve.radiocsirt.org/vuln/cnvd-2016-01283 cnvd-2016-01283 2026-10-03T10:31:01.322407+00:00 cnvd-2016-01283 https://cve.radiocsirt.org/vuln/euvd-2026-81503 EUVD-2026-81503 2026-10-03T10:31:01.322427+00:00 EUVD-2026-81503 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0714 fkie_cve-2016-0714 2026-10-03T10:31:01.322444+00:00

The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.

 https://cve.radiocsirt.org/vuln/ghsa-mv42-px54-87jw GHSA-mv42-px54-87jw — Improper Access Control in Apache Tomcat 2026-10-03T10:31:01.322489+00:00

Affected: Maven: org.apache.tomcat:tomcat

The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.

 https://cve.radiocsirt.org/vuln/gsd-2016-0714 gsd-2016-0714 2026-10-03T10:31:01.322534+00:00 gsd-2016-0714 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10446-1 openSUSE-SU-2024:10446-1 — tomcat-8.0.36-3.3 on GA media 2026-10-03T10:31:01.322554+00:00

tomcat-8.0.36-3.3 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2016:1087 RHSA-2016:1087 — Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 update 2026-10-03T10:31:01.322589+00:00

tomcat: directory disclosure tomcat: Session fixation tomcat: CSRF token leak tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms tomcat: security manager bypass via setGlobalContext()

 https://cve.radiocsirt.org/vuln/suse-su-2016:0769-1 SUSE-SU-2016:0769-1 — Security update for tomcat 2026-10-03T10:31:01.322631+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0714 UBUNTU-CVE-2016-0714 2026-10-03T10:31:01.322661+00:00

Affected: Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat6

The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1277 WID-SEC-W-2024-1277 — Oracle Fusion Middleware: Mehrere Schwachstellen 2026-10-03T10:31:01.322701+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.