https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:18:34 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-00612 bdu:2016-00612 https://cve.radiocsirt.org/vuln/bdu:2016-00612 https://cve.radiocsirt.org/vuln/cnvd-2016-01381 cnvd-2016-01381 https://cve.radiocsirt.org/vuln/cnvd-2016-01381 https://cve.radiocsirt.org/vuln/euvd-2026-93349 EUVD-2026-93349 https://cve.radiocsirt.org/vuln/euvd-2026-93349 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5346 <p>Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote attackers to hijack web sessions by leveraging use of a requestedSessionSSL field for an unintended request, related to CoyoteAdapter.java and Request.java.</p> <p>Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote attackers to hijack web sessions by leveraging use of a requestedSessionSSL field for an unintended request, related to CoyoteAdapter.java and Request.java.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-5346 https://cve.radiocsirt.org/vuln/ghsa-jrcp-c39h-r29x <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote attackers to hijack web sessions by leveraging use of a requestedSessionSSL field for an unintended request, related to CoyoteAdapter.java and Request.java.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote attackers to hijack web sessions by leveraging use of a requestedSessionSSL field for an unintended request, related to CoyoteAdapter.java and Request.java.</p> https://cve.radiocsirt.org/vuln/ghsa-jrcp-c39h-r29x https://cve.radiocsirt.org/vuln/gsd-2015-5346 gsd-2015-5346 https://cve.radiocsirt.org/vuln/gsd-2015-5346 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10446-1 <p>tomcat-8.0.36-3.3 on GA media</p> <p>tomcat-8.0.36-3.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10446-1 https://cve.radiocsirt.org/vuln/rhsa-2016:1087 <p>tomcat: directory disclosure tomcat: Session fixation tomcat: CSRF token leak tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms tomcat: security manager bypass via setGlobalContext()</p> <p>tomcat: directory disclosure tomcat: Session fixation tomcat: CSRF token leak tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms tomcat: security manager bypass via setGlobalContext()</p> https://cve.radiocsirt.org/vuln/rhsa-2016:1087 https://cve.radiocsirt.org/vuln/suse-su-2016:0769-1 <p>Security update for tomcat</p> <p>Security update for tomcat</p> https://cve.radiocsirt.org/vuln/suse-su-2016:0769-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5346 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat7</p> <p>Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote attackers to hijack web sessions by leveraging use of a requestedSessionSSL field for an unintended request, related to CoyoteAdapter.java and Request.java.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat7</p> <p>Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote attackers to hijack web sessions by leveraging use of a requestedSessionSSL field for an unintended request, related to CoyoteAdapter.java and Request.java.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5346