Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:28:59 +0000 certa-2008-avi-066 — Plusieurs vulnérabilités affectent le moteur de <span class="textit">servlets</span> Apache Tomcat. Elles permettent de… https://cve.radiocsirt.org/vuln/certa-2008-avi-066 certa-2008-avi-066 https://cve.radiocsirt.org/vuln/certa-2008-avi-066 EUVD-2026-137986 https://cve.radiocsirt.org/vuln/euvd-2026-137986 EUVD-2026-137986 https://cve.radiocsirt.org/vuln/euvd-2026-137986 fkie_cve-2007-6286 https://cve.radiocsirt.org/vuln/fkie_cve-2007-6286 <p>Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of &#34;a duplicate copy of one of the recent requests,&#34; as demonstrated by using netcat to send the empty request.</p> <p>Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of &#34;a duplicate copy of one of the recent requests,&#34; as demonstrated by using netcat to send the empty request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-6286 GHSA-qrj4-rmqg-4hcp — Apache Tomcat Does Not Properly Handle Empty Requests https://cve.radiocsirt.org/vuln/ghsa-qrj4-rmqg-4hcp <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of &#34;a duplicate copy of one of the recent requests,&#34; as demonstrated by using netcat to send the empty request.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of &#34;a duplicate copy of one of the recent requests,&#34; as demonstrated by using netcat to send the empty request.</p> https://cve.radiocsirt.org/vuln/ghsa-qrj4-rmqg-4hcp gsd-2007-6286 https://cve.radiocsirt.org/vuln/gsd-2007-6286 gsd-2007-6286 https://cve.radiocsirt.org/vuln/gsd-2007-6286