https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:32:28 +0000 https://cve.radiocsirt.org/vuln/certa-2008-avi-511 certa-2008-avi-511 https://cve.radiocsirt.org/vuln/certa-2008-avi-511 https://cve.radiocsirt.org/vuln/euvd-2026-128364 EUVD-2026-128364 https://cve.radiocsirt.org/vuln/euvd-2026-128364 https://cve.radiocsirt.org/vuln/fkie_cve-2008-3271 <p>Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a &#34;synchronization problem&#34; and lack of thread safety, and related to RemoteFilterValve, RemoteAddrValve, and RemoteHostValve.</p> <p>Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a &#34;synchronization problem&#34; and lack of thread safety, and related to RemoteFilterValve, RemoteAddrValve, and RemoteHostValve.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-3271 https://cve.radiocsirt.org/vuln/ghsa-5jpg-mjvg-hfhp <p>Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a &#34;synchronization problem&#34; and lack of thread safety, and related to RemoteFilterValve, RemoteAddrValve, and RemoteHostValve.</p> <p>Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a &#34;synchronization problem&#34; and lack of thread safety, and related to RemoteFilterValve, RemoteAddrValve, and RemoteHostValve.</p> https://cve.radiocsirt.org/vuln/ghsa-5jpg-mjvg-hfhp https://cve.radiocsirt.org/vuln/gsd-2008-3271 gsd-2008-3271 https://cve.radiocsirt.org/vuln/gsd-2008-3271 https://cve.radiocsirt.org/vuln/jvndb-2008-000069 <p>Apache Tomcat from The Apache Software Foundation contains a vulnerability which may allow a user from a non-premitted IP address to gain access. Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page (JSP) technologies. Apache Tomcat contains a vulnerability which may allow a user from a non-permitted IP address to gain access to a protected context. This vulnerability was addressed and solved in ASF Bugzilla - Bug 25835. However there was no description regarding this vulnerability in ASF Bugzilla - Bug 25835. Therefore, The Apache Tomcat Development Team has decided to publish an advisory regarding this issue. Kenichi Tsukamoto of Development Dept. II Application Management Middleware Div. FUJITSU LIMITED reported this vulnerability to IPA. JPCERT/CC coordinated with The Apache Software Foundation and the vendors under Information Security Early Warning Partnership.</p> <p>Apache Tomcat from The Apache Software Foundation contains a vulnerability which may allow a user from a non-premitted IP address to gain access. Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page (JSP) technologies. Apache Tomcat contains a vulnerability which may allow a user from a non-permitted IP address to gain access to a protected context. This vulnerability was addressed and solved in ASF Bugzilla - Bug 25835. However there was no description regarding this vulnerability in ASF Bugzilla - Bug 25835. Therefore, The Apache Tomcat Development Team has decided to publish an advisory regarding this issue. Kenichi Tsukamoto of Development Dept. II Application Management Middleware Div. FUJITSU LIMITED reported this vulnerability to IPA. JPCERT/CC coordinated with The Apache Software Foundation and the vendors under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2008-000069 https://cve.radiocsirt.org/vuln/rhsa-2008:1007 <p>tomcat: Cross-Site-Scripting enabled by sendError call Tomcat host manager xss - name field tomcat RequestDispatcher information disclosure vulnerability tomcat Unicode directory traversal vulnerability tomcat RemoteFilterValve Information disclosure</p> <p>tomcat: Cross-Site-Scripting enabled by sendError call Tomcat host manager xss - name field tomcat RequestDispatcher information disclosure vulnerability tomcat Unicode directory traversal vulnerability tomcat RemoteFilterValve Information disclosure</p> https://cve.radiocsirt.org/vuln/rhsa-2008:1007