https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:59:20 +0000 https://cve.radiocsirt.org/vuln/certfr-2015-avi-317 certfr-2015-avi-317 https://cve.radiocsirt.org/vuln/certfr-2015-avi-317 https://cve.radiocsirt.org/vuln/cnvd-2015-03233 cnvd-2015-03233 https://cve.radiocsirt.org/vuln/cnvd-2015-03233 https://cve.radiocsirt.org/vuln/euvd-2026-102760 EUVD-2026-102760 https://cve.radiocsirt.org/vuln/euvd-2026-102760 https://cve.radiocsirt.org/vuln/fkie_cve-2014-7810 <p>The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.</p> <p>The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-7810 https://cve.radiocsirt.org/vuln/ghsa-4c43-cwvx-9crh <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.</p> https://cve.radiocsirt.org/vuln/ghsa-4c43-cwvx-9crh https://cve.radiocsirt.org/vuln/gsd-2014-7810 gsd-2014-7810 https://cve.radiocsirt.org/vuln/gsd-2014-7810 https://cve.radiocsirt.org/vuln/rhsa-2015:1621 <p>tomcat: non-persistent DoS attack by feeding data by aborting an upload Tomcat/JbossWeb: security manager bypass via EL expressions</p> <p>tomcat: non-persistent DoS attack by feeding data by aborting an upload Tomcat/JbossWeb: security manager bypass via EL expressions</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1621 https://cve.radiocsirt.org/vuln/rhsa-2016:2046 <p>Tomcat/JbossWeb: security manager bypass via EL expressions tomcat: Session fixation Tomcat: CGI sets environmental variable based on user supplied Proxy request header tomcat: Local privilege escalation via systemd-tmpfiles service tomcat: tomcat writable config files allow privilege escalation</p> <p>Tomcat/JbossWeb: security manager bypass via EL expressions tomcat: Session fixation Tomcat: CGI sets environmental variable based on user supplied Proxy request header tomcat: Local privilege escalation via systemd-tmpfiles service tomcat: tomcat writable config files allow privilege escalation</p> https://cve.radiocsirt.org/vuln/rhsa-2016:2046 https://cve.radiocsirt.org/vuln/suse-su-2015:1281-1 <p>Security update for tomcat</p> <p>Security update for tomcat</p> https://cve.radiocsirt.org/vuln/suse-su-2015:1281-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-7810 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat6</p> <p>The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat6</p> <p>The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-7810 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1594 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1594