https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:23:18 +0000 https://cve.radiocsirt.org/vuln/certa-2008-avi-392 certa-2008-avi-392 https://cve.radiocsirt.org/vuln/certa-2008-avi-392 https://cve.radiocsirt.org/vuln/euvd-2026-127584 EUVD-2026-127584 https://cve.radiocsirt.org/vuln/euvd-2026-127584 https://cve.radiocsirt.org/vuln/fkie_cve-2008-2370 <p>Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.</p> <p>Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-2370 https://cve.radiocsirt.org/vuln/ghsa-m8h8-6rvg-f4mg <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a `RequestDispatcher` is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a `..` (dot dot) in a request parameter.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a `RequestDispatcher` is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a `..` (dot dot) in a request parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-m8h8-6rvg-f4mg https://cve.radiocsirt.org/vuln/gsd-2008-2370 gsd-2008-2370 https://cve.radiocsirt.org/vuln/gsd-2008-2370 https://cve.radiocsirt.org/vuln/rhsa-2008:0648 <p>tomcat: Cross-Site-Scripting enabled by sendError call Tomcat host manager xss - name field tomcat RequestDispatcher information disclosure vulnerability tomcat Unicode directory traversal vulnerability</p> <p>tomcat: Cross-Site-Scripting enabled by sendError call Tomcat host manager xss - name field tomcat RequestDispatcher information disclosure vulnerability tomcat Unicode directory traversal vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2008:0648