https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:29:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-00409 bdu:2015-00409 https://cve.radiocsirt.org/vuln/bdu:2015-00409 https://cve.radiocsirt.org/vuln/certfr-2014-avi-243 certfr-2014-avi-243 https://cve.radiocsirt.org/vuln/certfr-2014-avi-243 https://cve.radiocsirt.org/vuln/euvd-2026-96736 EUVD-2026-96736 https://cve.radiocsirt.org/vuln/euvd-2026-96736 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0119 <p>Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.</p> <p>Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-0119 https://cve.radiocsirt.org/vuln/ghsa-prc3-7f44-w48j <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat, Maven: org.apache.tomcat:tomcat-catalina, Maven: org.apache.tomcat:tomcat-jasper</p> <p>Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat, Maven: org.apache.tomcat:tomcat-catalina, Maven: org.apache.tomcat:tomcat-jasper</p> <p>Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.</p> https://cve.radiocsirt.org/vuln/ghsa-prc3-7f44-w48j https://cve.radiocsirt.org/vuln/gsd-2014-0119 gsd-2014-0119 https://cve.radiocsirt.org/vuln/gsd-2014-0119 https://cve.radiocsirt.org/vuln/rhsa-2014:0842 <p>Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs Tomcat/JBossWeb: Request smuggling via malicious content length header Tomcat/JBossWeb: XML parser hijack by malicious web application</p> <p>Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs Tomcat/JBossWeb: Request smuggling via malicious content length header Tomcat/JBossWeb: XML parser hijack by malicious web application</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0842 https://cve.radiocsirt.org/vuln/rhsa-2014:1034 <p>Tomcat/JBossWeb: XML parser hijack by malicious web application</p> <p>Tomcat/JBossWeb: XML parser hijack by malicious web application</p> https://cve.radiocsirt.org/vuln/rhsa-2014:1034 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0119 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7</p> <p>Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7</p> <p>Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0119