https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:36:38 +0000 https://cve.radiocsirt.org/vuln/certa-2012-avi-066 certa-2012-avi-066 https://cve.radiocsirt.org/vuln/certa-2012-avi-066 https://cve.radiocsirt.org/vuln/euvd-2026-117151 EUVD-2026-117151 https://cve.radiocsirt.org/vuln/euvd-2026-117151 https://cve.radiocsirt.org/vuln/fkie_cve-2011-5063 <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weaker authentication or authorization requirements, a different vulnerability than CVE-2011-1184.</p> <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weaker authentication or authorization requirements, a different vulnerability than CVE-2011-1184.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-5063 https://cve.radiocsirt.org/vuln/ghsa-hffm-fqv4-w27r <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weaker authentication or authorization requirements, a different vulnerability than CVE-2011-1184.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weaker authentication or authorization requirements, a different vulnerability than CVE-2011-1184.</p> https://cve.radiocsirt.org/vuln/ghsa-hffm-fqv4-w27r https://cve.radiocsirt.org/vuln/gsd-2011-5063 gsd-2011-5063 https://cve.radiocsirt.org/vuln/gsd-2011-5063 https://cve.radiocsirt.org/vuln/rhsa-2011:1780 <p>tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: password disclosure vulnerability tomcat: security manager restrictions bypass tomcat: authentication bypass and information disclosure tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication</p> <p>tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: password disclosure vulnerability tomcat: security manager restrictions bypass tomcat: authentication bypass and information disclosure tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication</p> https://cve.radiocsirt.org/vuln/rhsa-2011:1780