Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:55:25 +0000 certa-2010-avi-567 — Des vulnérabilités ont été découvertes dans Apache Tomcat. Elles permettent à un utilisateur de faire de l'injection de… https://cve.radiocsirt.org/vuln/certa-2010-avi-567 certa-2010-avi-567 https://cve.radiocsirt.org/vuln/certa-2010-avi-567 EUVD-2026-120429 https://cve.radiocsirt.org/vuln/euvd-2026-120429 EUVD-2026-120429 https://cve.radiocsirt.org/vuln/euvd-2026-120429 fkie_cve-2010-4172 https://cve.radiocsirt.org/vuln/fkie_cve-2010-4172 <p>Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-4172 GHSA-c78g-qwpw-2jgv — Improper Neutralization of Input During Web Page Generation in Apache Tomcat https://cve.radiocsirt.org/vuln/ghsa-c78g-qwpw-2jgv <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.</p> https://cve.radiocsirt.org/vuln/ghsa-c78g-qwpw-2jgv gsd-2010-4172 https://cve.radiocsirt.org/vuln/gsd-2010-4172 gsd-2010-4172 https://cve.radiocsirt.org/vuln/gsd-2010-4172 RHSA-2011:0791 — Red Hat Security Advisory: tomcat6 security and bug fix update https://cve.radiocsirt.org/vuln/rhsa-2011:0791 <p>tomcat: file permission bypass flaw tomcat: cross-site-scripting vulnerability in the manager application tomcat: XSS vulnerability in HTML Manager interface</p> <p>tomcat: file permission bypass flaw tomcat: cross-site-scripting vulnerability in the manager application tomcat: XSS vulnerability in HTML Manager interface</p> https://cve.radiocsirt.org/vuln/rhsa-2011:0791