Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:41:21 +0000 certa-2007-avi-362 — Plusieurs vulnérabilités du moteur de <span class="textit">servlets</span> <span class="textit">Tomcat</span> permetten… https://cve.radiocsirt.org/vuln/certa-2007-avi-362 certa-2007-avi-362 https://cve.radiocsirt.org/vuln/certa-2007-avi-362 EUVD-2026-135280 https://cve.radiocsirt.org/vuln/euvd-2026-135280 EUVD-2026-135280 https://cve.radiocsirt.org/vuln/euvd-2026-135280 fkie_cve-2007-3385 https://cve.radiocsirt.org/vuln/fkie_cve-2007-3385 <p>Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \&#34; character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.</p> <p>Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \&#34; character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-3385 GHSA-6j8f-66vh-39mj — Apache Tomcat Mishandles Character Sequence in Cookies https://cve.radiocsirt.org/vuln/ghsa-6j8f-66vh-39mj <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the `\&#34;` character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the `\&#34;` character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-6j8f-66vh-39mj gsd-2007-3385 https://cve.radiocsirt.org/vuln/gsd-2007-3385 gsd-2007-3385 https://cve.radiocsirt.org/vuln/gsd-2007-3385 RHSA-2007:0871 — Red Hat Security Advisory: tomcat security update https://cve.radiocsirt.org/vuln/rhsa-2007:0871 <p>tomcat handling of cookies tomcat handling of cookie values tomcat host manager xss</p> <p>tomcat handling of cookies tomcat handling of cookie values tomcat host manager xss</p> https://cve.radiocsirt.org/vuln/rhsa-2007:0871