https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:57:38 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-01972 bdu:2020-01972 https://cve.radiocsirt.org/vuln/bdu:2020-01972 https://cve.radiocsirt.org/vuln/certfr-2019-avi-643 certfr-2019-avi-643 https://cve.radiocsirt.org/vuln/certfr-2019-avi-643 https://cve.radiocsirt.org/vuln/cnvd-2020-00504 cnvd-2020-00504 https://cve.radiocsirt.org/vuln/cnvd-2020-00504 https://cve.radiocsirt.org/vuln/euvd-2026-55038 EUVD-2026-55038 https://cve.radiocsirt.org/vuln/euvd-2026-55038 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12418 <p>When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and gain complete control over the Tomcat instance.</p> <p>When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and gain complete control over the Tomcat instance.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-12418 https://cve.radiocsirt.org/vuln/ghsa-hh3j-x4mc-g48r <p><strong>Affected:</strong> Maven: org.apache.tomcat.embed:tomcat-embed-core</p> <p>When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and gain complete control over the Tomcat instance.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat.embed:tomcat-embed-core</p> <p>When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and gain complete control over the Tomcat instance.</p> https://cve.radiocsirt.org/vuln/ghsa-hh3j-x4mc-g48r https://cve.radiocsirt.org/vuln/gsd-2019-12418 gsd-2019-12418 https://cve.radiocsirt.org/vuln/gsd-2019-12418 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0038-1 <p>Security update for tomcat</p> <p>Security update for tomcat</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0038-1 https://cve.radiocsirt.org/vuln/rhsa-2020:0860 <p>tomcat: XSS in SSI printenv tomcat: local privilege escalation tomcat: Session fixation when using FORM authentication tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability</p> <p>tomcat: XSS in SSI printenv tomcat: local privilege escalation tomcat: Session fixation when using FORM authentication tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2020:0860 https://cve.radiocsirt.org/vuln/suse-su-2020:0029-1 <p>Security update for tomcat</p> <p>Security update for tomcat</p> https://cve.radiocsirt.org/vuln/suse-su-2020:0029-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12418 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat8, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:Pro:18.04:LTS: tomcat9</p> <p>When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and gain complete control over the Tomcat instance.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat8, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:Pro:18.04:LTS: tomcat9</p> <p>When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and gain complete control over the Tomcat instance.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12418 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1229 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um Daten offenzulegen oder die Kontrolle über eine Tomcat-Instanz zu erlangen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um Daten offenzulegen oder die Kontrolle über eine Tomcat-Instanz zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1229