https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:06:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-00615 bdu:2016-00615 https://cve.radiocsirt.org/vuln/bdu:2016-00615 https://cve.radiocsirt.org/vuln/certfr-2016-avi-350 certfr-2016-avi-350 https://cve.radiocsirt.org/vuln/certfr-2016-avi-350 https://cve.radiocsirt.org/vuln/cnvd-2016-01283 cnvd-2016-01283 https://cve.radiocsirt.org/vuln/cnvd-2016-01283 https://cve.radiocsirt.org/vuln/euvd-2026-81503 EUVD-2026-81503 https://cve.radiocsirt.org/vuln/euvd-2026-81503 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0714 <p>The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.</p> <p>The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-0714 https://cve.radiocsirt.org/vuln/ghsa-mv42-px54-87jw <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.</p> https://cve.radiocsirt.org/vuln/ghsa-mv42-px54-87jw https://cve.radiocsirt.org/vuln/gsd-2016-0714 gsd-2016-0714 https://cve.radiocsirt.org/vuln/gsd-2016-0714 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10446-1 <p>tomcat-8.0.36-3.3 on GA media</p> <p>tomcat-8.0.36-3.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10446-1 https://cve.radiocsirt.org/vuln/rhsa-2016:1087 <p>tomcat: directory disclosure tomcat: Session fixation tomcat: CSRF token leak tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms tomcat: security manager bypass via setGlobalContext()</p> <p>tomcat: directory disclosure tomcat: Session fixation tomcat: CSRF token leak tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms tomcat: security manager bypass via setGlobalContext()</p> https://cve.radiocsirt.org/vuln/rhsa-2016:1087 https://cve.radiocsirt.org/vuln/suse-su-2016:0769-1 <p>Security update for tomcat</p> <p>Security update for tomcat</p> https://cve.radiocsirt.org/vuln/suse-su-2016:0769-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0714 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat6</p> <p>The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat6</p> <p>The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0714 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1277 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1277