Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:34:27 +0000 certa-2011-avi-081 — Plusieurs vulnérabilités ont été corrigées sur les serveurs Apache Tomcat versions 5, 6 et 7. https://cve.radiocsirt.org/vuln/certa-2011-avi-081 certa-2011-avi-081 https://cve.radiocsirt.org/vuln/certa-2011-avi-081 EUVD-2026-120145 https://cve.radiocsirt.org/vuln/euvd-2026-120145 EUVD-2026-120145 https://cve.radiocsirt.org/vuln/euvd-2026-120145 fkie_cve-2010-3718 https://cve.radiocsirt.org/vuln/fkie_cve-2010-3718 <p>Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack.</p> <p>Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-3718 GHSA-fj6c-prgj-gr3r — Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat https://cve.radiocsirt.org/vuln/ghsa-fj6c-prgj-gr3r <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack.</p> https://cve.radiocsirt.org/vuln/ghsa-fj6c-prgj-gr3r gsd-2010-3718 https://cve.radiocsirt.org/vuln/gsd-2010-3718 gsd-2010-3718 https://cve.radiocsirt.org/vuln/gsd-2010-3718 RHSA-2011:0791 — Red Hat Security Advisory: tomcat6 security and bug fix update https://cve.radiocsirt.org/vuln/rhsa-2011:0791 <p>tomcat: file permission bypass flaw tomcat: cross-site-scripting vulnerability in the manager application tomcat: XSS vulnerability in HTML Manager interface</p> <p>tomcat: file permission bypass flaw tomcat: cross-site-scripting vulnerability in the manager application tomcat: XSS vulnerability in HTML Manager interface</p> https://cve.radiocsirt.org/vuln/rhsa-2011:0791