https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:52:19 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-09530 cnvd-2016-09530 https://cve.radiocsirt.org/vuln/cnvd-2016-09530 https://cve.radiocsirt.org/vuln/euvd-2026-85196 EUVD-2026-85196 https://cve.radiocsirt.org/vuln/euvd-2026-85196 https://cve.radiocsirt.org/vuln/fkie_cve-2016-5425 <p>The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group.</p> <p>The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-5425 https://cve.radiocsirt.org/vuln/ghsa-c7fc-mp9g-99j3 <p>The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group.</p> <p>The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group.</p> https://cve.radiocsirt.org/vuln/ghsa-c7fc-mp9g-99j3 https://cve.radiocsirt.org/vuln/gsd-2016-5425 gsd-2016-5425 https://cve.radiocsirt.org/vuln/gsd-2016-5425 https://cve.radiocsirt.org/vuln/rhsa-2016:2046 <p>Tomcat/JbossWeb: security manager bypass via EL expressions tomcat: Session fixation Tomcat: CGI sets environmental variable based on user supplied Proxy request header tomcat: Local privilege escalation via systemd-tmpfiles service tomcat: tomcat writable config files allow privilege escalation</p> <p>Tomcat/JbossWeb: security manager bypass via EL expressions tomcat: Session fixation Tomcat: CGI sets environmental variable based on user supplied Proxy request header tomcat: Local privilege escalation via systemd-tmpfiles service tomcat: tomcat writable config files allow privilege escalation</p> https://cve.radiocsirt.org/vuln/rhsa-2016:2046