https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:34:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-00613 bdu:2016-00613 https://cve.radiocsirt.org/vuln/bdu:2016-00613 https://cve.radiocsirt.org/vuln/certfr-2016-avi-350 certfr-2016-avi-350 https://cve.radiocsirt.org/vuln/certfr-2016-avi-350 https://cve.radiocsirt.org/vuln/cnvd-2016-01325 cnvd-2016-01325 https://cve.radiocsirt.org/vuln/cnvd-2016-01325 https://cve.radiocsirt.org/vuln/euvd-2026-93330 EUVD-2026-93330 https://cve.radiocsirt.org/vuln/euvd-2026-93330 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5351 <p>The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.</p> <p>The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-5351 https://cve.radiocsirt.org/vuln/ghsa-w7cg-5969-678w <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.</p> https://cve.radiocsirt.org/vuln/ghsa-w7cg-5969-678w https://cve.radiocsirt.org/vuln/gsd-2015-5351 gsd-2015-5351 https://cve.radiocsirt.org/vuln/gsd-2015-5351 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10446-1 <p>tomcat-8.0.36-3.3 on GA media</p> <p>tomcat-8.0.36-3.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10446-1 https://cve.radiocsirt.org/vuln/rhsa-2016:1087 <p>tomcat: directory disclosure tomcat: Session fixation tomcat: CSRF token leak tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms tomcat: security manager bypass via setGlobalContext()</p> <p>tomcat: directory disclosure tomcat: Session fixation tomcat: CSRF token leak tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms tomcat: security manager bypass via setGlobalContext()</p> https://cve.radiocsirt.org/vuln/rhsa-2016:1087 https://cve.radiocsirt.org/vuln/suse-su-2016:0769-1 <p>Security update for tomcat</p> <p>Security update for tomcat</p> https://cve.radiocsirt.org/vuln/suse-su-2016:0769-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5351 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7</p> <p>The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7</p> <p>The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5351 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1277 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1277