https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:23:03.554010+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-00616 bdu:2016-00616 2026-10-03T13:23:03.758451+00:00 bdu:2016-00616 https://cve.radiocsirt.org/vuln/certfr-2016-avi-350 certfr-2016-avi-350 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle Linux and Virtualization</span>. Certain… 2026-10-03T13:23:03.758493+00:00 certfr-2016-avi-350 https://cve.radiocsirt.org/vuln/cnvd-2016-01382 cnvd-2016-01382 2026-10-03T13:23:03.758512+00:00 cnvd-2016-01382 https://cve.radiocsirt.org/vuln/euvd-2026-81531 EUVD-2026-81531 2026-10-03T13:23:03.758525+00:00 EUVD-2026-81531 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0763 fkie_cve-2016-0763 2026-10-03T13:23:03.758535+00:00

The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context.

 https://cve.radiocsirt.org/vuln/ghsa-9hjv-9h75-xmpp GHSA-9hjv-9h75-xmpp — Improper Verification of Source of a Communication Channel in Apache Tomcat 2026-10-03T13:23:03.758565+00:00

Affected: Maven: org.apache.tomcat:tomcat

The `setGlobalContext` method in `org/apache/naming/factory/ResourceLinkFactory.java` in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context.

 https://cve.radiocsirt.org/vuln/gsd-2016-0763 gsd-2016-0763 2026-10-03T13:23:03.758591+00:00 gsd-2016-0763 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10446-1 openSUSE-SU-2024:10446-1 — tomcat-8.0.36-3.3 on GA media 2026-10-03T13:23:03.758602+00:00

tomcat-8.0.36-3.3 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2016:1087 RHSA-2016:1087 — Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 update 2026-10-03T13:23:03.758634+00:00

tomcat: directory disclosure tomcat: Session fixation tomcat: CSRF token leak tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms tomcat: security manager bypass via setGlobalContext()

 https://cve.radiocsirt.org/vuln/suse-su-2016:0769-1 SUSE-SU-2016:0769-1 — Security update for tomcat 2026-10-03T13:23:03.758698+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0763 UBUNTU-CVE-2016-0763 2026-10-03T13:23:03.758715+00:00

Affected: Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat6

The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1277 WID-SEC-W-2024-1277 — Oracle Fusion Middleware: Mehrere Schwachstellen 2026-10-03T13:23:03.758739+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.