https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:55:28 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-149263 EUVD-2026-149263 https://cve.radiocsirt.org/vuln/euvd-2026-149263 https://cve.radiocsirt.org/vuln/fkie_cve-2005-4838 <p>Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp. NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp. NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2005-4838 https://cve.radiocsirt.org/vuln/ghsa-mxxf-x9fw-f2hv <p>Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp. NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp. NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries.</p> https://cve.radiocsirt.org/vuln/ghsa-mxxf-x9fw-f2hv https://cve.radiocsirt.org/vuln/gsd-2005-4838 gsd-2005-4838 https://cve.radiocsirt.org/vuln/gsd-2005-4838 https://cve.radiocsirt.org/vuln/rhsa-2007:0340 <p>tomcat multiple content-length header poisioning tomcat DoS tomcat manager example DoS tomcat directory listing issue tomcat XSS in example webapps tomcat XSS in example webapps tomcat directory traversal tomcat anonymous cipher issue</p> <p>tomcat multiple content-length header poisioning tomcat DoS tomcat manager example DoS tomcat directory listing issue tomcat XSS in example webapps tomcat XSS in example webapps tomcat directory traversal tomcat anonymous cipher issue</p> https://cve.radiocsirt.org/vuln/rhsa-2007:0340