https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:32:43 +0000 https://cve.radiocsirt.org/vuln/certfr-2014-avi-244 certfr-2014-avi-244 https://cve.radiocsirt.org/vuln/certfr-2014-avi-244 https://cve.radiocsirt.org/vuln/euvd-2026-96593 EUVD-2026-96593 https://cve.radiocsirt.org/vuln/euvd-2026-96593 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0033 <p>org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting when handling a session ID in a URL, which allows remote attackers to conduct session fixation attacks via a crafted URL.</p> <p>org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting when handling a session ID in a URL, which allows remote attackers to conduct session fixation attacks via a crafted URL.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-0033 https://cve.radiocsirt.org/vuln/ghsa-6gjj-c5mj-4cvp <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting when handling a session ID in a URL, which allows remote attackers to conduct session fixation attacks via a crafted URL.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting when handling a session ID in a URL, which allows remote attackers to conduct session fixation attacks via a crafted URL.</p> https://cve.radiocsirt.org/vuln/ghsa-6gjj-c5mj-4cvp https://cve.radiocsirt.org/vuln/gsd-2014-0033 gsd-2014-0033 https://cve.radiocsirt.org/vuln/gsd-2014-0033 https://cve.radiocsirt.org/vuln/rhsa-2014:0525 <p>tomcat: multiple content-length header poisoning flaws tomcat: incomplete fix for CVE-2012-3544 tomcat: session fixation still possible with disableURLRewriting enabled apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream</p> <p>tomcat: multiple content-length header poisoning flaws tomcat: incomplete fix for CVE-2012-3544 tomcat: session fixation still possible with disableURLRewriting enabled apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0525 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0033 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat6</p> <p>org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting when handling a session ID in a URL, which allows remote attackers to conduct session fixation attacks via a crafted URL.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat6</p> <p>org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting when handling a session ID in a URL, which allows remote attackers to conduct session fixation attacks via a crafted URL.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0033