https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 12:06:56 +0000 https://cve.radiocsirt.org/vuln/bit-tomcat-2020-13943 <p><strong>Affected:</strong> Bitnami: tomcat</p> <p>If an HTTP/2 client connecting to Apache Tomcat 9.0.0 through 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.</p> <p><strong>Affected:</strong> Bitnami: tomcat</p> <p>If an HTTP/2 client connecting to Apache Tomcat 9.0.0 through 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.</p> https://cve.radiocsirt.org/vuln/bit-tomcat-2020-13943 https://cve.radiocsirt.org/vuln/certfr-2021-avi-951 certfr-2021-avi-951 https://cve.radiocsirt.org/vuln/certfr-2021-avi-951 https://cve.radiocsirt.org/vuln/euvd-2026-42123 EUVD-2026-42123 https://cve.radiocsirt.org/vuln/euvd-2026-42123 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13943 <p>If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.</p> <p>If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-13943 https://cve.radiocsirt.org/vuln/ghsa-f268-65qc-98vg <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat-coyote</p> <p>If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat-coyote</p> <p>If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.</p> https://cve.radiocsirt.org/vuln/ghsa-f268-65qc-98vg https://cve.radiocsirt.org/vuln/gsd-2020-13943 gsd-2020-13943 https://cve.radiocsirt.org/vuln/gsd-2020-13943 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1799-1 <p>Security update for tomcat</p> <p>Security update for tomcat</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:1799-1 https://cve.radiocsirt.org/vuln/rhsa-2021:0494 <p>openssl: EDIPARTYNAME NULL pointer de-reference tomcat: Apache Tomcat HTTP/2 Request mix-up tomcat: HTTP/2 request header mix-up tomcat: Information disclosure when using NTFS file system</p> <p>openssl: EDIPARTYNAME NULL pointer de-reference tomcat: Apache Tomcat HTTP/2 Request mix-up tomcat: HTTP/2 request header mix-up tomcat: Information disclosure when using NTFS file system</p> https://cve.radiocsirt.org/vuln/rhsa-2021:0494 https://cve.radiocsirt.org/vuln/suse-su-2020:2996-1 <p>Security update for tomcat</p> <p>Security update for tomcat</p> https://cve.radiocsirt.org/vuln/suse-su-2020:2996-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2467 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2467