https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:21:32 +0000 https://cve.radiocsirt.org/vuln/certa-2007-avi-569 certa-2007-avi-569 https://cve.radiocsirt.org/vuln/certa-2007-avi-569 https://cve.radiocsirt.org/vuln/euvd-2026-137091 EUVD-2026-137091 https://cve.radiocsirt.org/vuln/euvd-2026-137091 https://cve.radiocsirt.org/vuln/fkie_cve-2007-5342 <p>The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.</p> <p>The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-5342 https://cve.radiocsirt.org/vuln/ghsa-w65j-cmqc-37p2 <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat-juli</p> <p>The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the `org.apache.juli.FileHandler` handler.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat-juli</p> <p>The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the `org.apache.juli.FileHandler` handler.</p> https://cve.radiocsirt.org/vuln/ghsa-w65j-cmqc-37p2 https://cve.radiocsirt.org/vuln/gsd-2007-5342 gsd-2007-5342 https://cve.radiocsirt.org/vuln/gsd-2007-5342 https://cve.radiocsirt.org/vuln/rhsa-2008:0042 <p>Apache Tomcat&#39;s default security policy is too open Absolute path traversal Apache Tomcat WEBDAV</p> <p>Apache Tomcat&#39;s default security policy is too open Absolute path traversal Apache Tomcat WEBDAV</p> https://cve.radiocsirt.org/vuln/rhsa-2008:0042