https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:52:38 +0000 https://cve.radiocsirt.org/vuln/certfr-2017-avi-314 certfr-2017-avi-314 https://cve.radiocsirt.org/vuln/certfr-2017-avi-314 https://cve.radiocsirt.org/vuln/cnvd-2017-27471 cnvd-2017-27471 https://cve.radiocsirt.org/vuln/cnvd-2017-27471 https://cve.radiocsirt.org/vuln/euvd-2026-169138 EUVD-2026-169138 https://cve.radiocsirt.org/vuln/euvd-2026-169138 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12616 <p>When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.</p> <p>When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-12616 https://cve.radiocsirt.org/vuln/ghsa-8qq4-8jvq-mfw4 <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat-catalina</p> <p>When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat-catalina</p> <p>When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.</p> https://cve.radiocsirt.org/vuln/ghsa-8qq4-8jvq-mfw4 https://cve.radiocsirt.org/vuln/gsd-2017-12616 gsd-2017-12616 https://cve.radiocsirt.org/vuln/gsd-2017-12616 https://cve.radiocsirt.org/vuln/rhsa-2018:0465 <p>apr: Out-of-bounds array deref in apr_time_exp*() functions tomcat: Remote Code Execution via JSP Upload tomcat: Information Disclosure when using VirtualDirContext tomcat: Remote Code Execution bypass for CVE-2017-12615 tomcat-native: Mishandling of client certificates can allow for OCSP check bypass tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources tomcat: Late application of security constraints can lead to resource exposure for unauthorised users</p> <p>apr: Out-of-bounds array deref in apr_time_exp*() functions tomcat: Remote Code Execution via JSP Upload tomcat: Information Disclosure when using VirtualDirContext tomcat: Remote Code Execution bypass for CVE-2017-12615 tomcat-native: Mishandling of client certificates can allow for OCSP check bypass tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources tomcat: Late application of security constraints can lead to resource exposure for unauthorised users</p> https://cve.radiocsirt.org/vuln/rhsa-2018:0465 https://cve.radiocsirt.org/vuln/suse-su-2017:3059-1 <p>Security update for tomcat</p> <p>Security update for tomcat</p> https://cve.radiocsirt.org/vuln/suse-su-2017:3059-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12616 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat7, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:Pro:18.04:LTS: tomcat7</p> <p>When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat7, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:Pro:18.04:LTS: tomcat7</p> <p>When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12616 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1238 <p>Ein anonymer oder lokaler Angreifer kann mehrere Schwachstellen in HPE HP-UX Tomcat Servlet Engine ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.</p> <p>Ein anonymer oder lokaler Angreifer kann mehrere Schwachstellen in HPE HP-UX Tomcat Servlet Engine ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1238