https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:07:39 +0000 https://cve.radiocsirt.org/vuln/certa-2009-avi-211 certa-2009-avi-211 https://cve.radiocsirt.org/vuln/certa-2009-avi-211 https://cve.radiocsirt.org/vuln/euvd-2026-121710 EUVD-2026-121710 https://cve.radiocsirt.org/vuln/euvd-2026-121710 https://cve.radiocsirt.org/vuln/fkie_cve-2009-0580 <p>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.</p> <p>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-0580 https://cve.radiocsirt.org/vuln/ghsa-w227-xcfx-3pj8 <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-w227-xcfx-3pj8 https://cve.radiocsirt.org/vuln/gsd-2009-0580 gsd-2009-0580 https://cve.radiocsirt.org/vuln/gsd-2009-0580 https://cve.radiocsirt.org/vuln/rhsa-2009:1143 <p>tomcat request dispatcher information disclosure vulnerability tomcat6 Information disclosure in authentication classes tomcat XML parser information disclosure</p> <p>tomcat request dispatcher information disclosure vulnerability tomcat6 Information disclosure in authentication classes tomcat XML parser information disclosure</p> https://cve.radiocsirt.org/vuln/rhsa-2009:1143