https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:01:00 +0000 https://cve.radiocsirt.org/vuln/certa-2014-avi-025 certa-2014-avi-025 https://cve.radiocsirt.org/vuln/certa-2014-avi-025 https://cve.radiocsirt.org/vuln/euvd-2026-105894 EUVD-2026-105894 https://cve.radiocsirt.org/vuln/euvd-2026-105894 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2071 <p>java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.</p> <p>java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-2071 https://cve.radiocsirt.org/vuln/ghsa-3p5r-7cw3-2m67 <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.</p> https://cve.radiocsirt.org/vuln/ghsa-3p5r-7cw3-2m67 https://cve.radiocsirt.org/vuln/gsd-2013-2071 gsd-2013-2071 https://cve.radiocsirt.org/vuln/gsd-2013-2071 https://cve.radiocsirt.org/vuln/rhsa-2013:1011 <p>httpd: multiple XSS flaws due to unescaped hostnames tomcat: Limited DoS in chunked transfer encoding input filter httpd: XSS flaw in mod_proxy_balancer manager interface tomcat: Session fixation in form authenticator tomcat: Information disclosure in asynchronous context when using AsyncListeners that threw RuntimeExceptions</p> <p>httpd: multiple XSS flaws due to unescaped hostnames tomcat: Limited DoS in chunked transfer encoding input filter httpd: XSS flaw in mod_proxy_balancer manager interface tomcat: Session fixation in form authenticator tomcat: Information disclosure in asynchronous context when using AsyncListeners that threw RuntimeExceptions</p> https://cve.radiocsirt.org/vuln/rhsa-2013:1011