https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:22:24 +0000 https://cve.radiocsirt.org/vuln/certa-2008-avi-416 certa-2008-avi-416 https://cve.radiocsirt.org/vuln/certa-2008-avi-416 https://cve.radiocsirt.org/vuln/euvd-2026-128070 EUVD-2026-128070 https://cve.radiocsirt.org/vuln/euvd-2026-128070 https://cve.radiocsirt.org/vuln/fkie_cve-2008-2938 <p>Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.</p> <p>Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-2938 https://cve.radiocsirt.org/vuln/ghsa-m7xj-ccqc-p4g2 <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.</p> https://cve.radiocsirt.org/vuln/ghsa-m7xj-ccqc-p4g2 https://cve.radiocsirt.org/vuln/gsd-2008-2938 gsd-2008-2938 https://cve.radiocsirt.org/vuln/gsd-2008-2938 https://cve.radiocsirt.org/vuln/rhsa-2008:0648 <p>tomcat: Cross-Site-Scripting enabled by sendError call Tomcat host manager xss - name field tomcat RequestDispatcher information disclosure vulnerability tomcat Unicode directory traversal vulnerability</p> <p>tomcat: Cross-Site-Scripting enabled by sendError call Tomcat host manager xss - name field tomcat RequestDispatcher information disclosure vulnerability tomcat Unicode directory traversal vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2008:0648