https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:12:26 +0000 https://cve.radiocsirt.org/vuln/certa-2009-avi-211 certa-2009-avi-211 https://cve.radiocsirt.org/vuln/certa-2009-avi-211 https://cve.radiocsirt.org/vuln/euvd-2026-130385 EUVD-2026-130385 https://cve.radiocsirt.org/vuln/euvd-2026-130385 https://cve.radiocsirt.org/vuln/fkie_cve-2008-5515 <p>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.</p> <p>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-5515 https://cve.radiocsirt.org/vuln/ghsa-9737-qmgc-hfr9 <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.</p> https://cve.radiocsirt.org/vuln/ghsa-9737-qmgc-hfr9 https://cve.radiocsirt.org/vuln/gsd-2008-5515 gsd-2008-5515 https://cve.radiocsirt.org/vuln/gsd-2008-5515 https://cve.radiocsirt.org/vuln/jvndb-2009-000036 <p>Apache Tomcat from The Apache Software Foundation contains an information disclosure vulnerability. Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page (JSP) technologies. Apache Tomcat contains a vulnerability which may allow information disclosure or access to the contents contained in the WEB-INF directory. According to the developer, unsupported Apache Tomcat 3.x, 4.0.x, and 5.0.x may also be affected. For more information, refer to the developer&#39;s website. Minehiko Iida and Yuichiro Suzuki of Development Dept. II Application Management Middleware Div. FUJITSU LIMITED reported this vulnerability to IPA. JPCERT/CC coordinated with The Apache Software Foundation and the vendors under Information Security Early Warning Partnership.</p> <p>Apache Tomcat from The Apache Software Foundation contains an information disclosure vulnerability. Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page (JSP) technologies. Apache Tomcat contains a vulnerability which may allow information disclosure or access to the contents contained in the WEB-INF directory. According to the developer, unsupported Apache Tomcat 3.x, 4.0.x, and 5.0.x may also be affected. For more information, refer to the developer&#39;s website. Minehiko Iida and Yuichiro Suzuki of Development Dept. II Application Management Middleware Div. FUJITSU LIMITED reported this vulnerability to IPA. JPCERT/CC coordinated with The Apache Software Foundation and the vendors under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2009-000036 https://cve.radiocsirt.org/vuln/rhsa-2009:1143 <p>tomcat request dispatcher information disclosure vulnerability tomcat6 Information disclosure in authentication classes tomcat XML parser information disclosure</p> <p>tomcat request dispatcher information disclosure vulnerability tomcat6 Information disclosure in authentication classes tomcat XML parser information disclosure</p> https://cve.radiocsirt.org/vuln/rhsa-2009:1143