https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:49:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-130365 EUVD-2026-130365 https://cve.radiocsirt.org/vuln/euvd-2026-130365 https://cve.radiocsirt.org/vuln/fkie_cve-2008-5519 <p>The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol&#39;s requirements for requests containing Content-Length headers.</p> <p>The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol&#39;s requirements for requests containing Content-Length headers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-5519 https://cve.radiocsirt.org/vuln/ghsa-3v4j-mhgf-pf6w <p>The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol&#39;s requirements for requests containing Content-Length headers.</p> <p>The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol&#39;s requirements for requests containing Content-Length headers.</p> https://cve.radiocsirt.org/vuln/ghsa-3v4j-mhgf-pf6w https://cve.radiocsirt.org/vuln/gsd-2008-5519 gsd-2008-5519 https://cve.radiocsirt.org/vuln/gsd-2008-5519 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10488-1 <p>apache2-mod_jk-1.2.41-1.5 on GA media</p> <p>apache2-mod_jk-1.2.41-1.5 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10488-1 https://cve.radiocsirt.org/vuln/rhsa-2009:0446 <p>mod_jk: session information leak</p> <p>mod_jk: session information leak</p> https://cve.radiocsirt.org/vuln/rhsa-2009:0446