https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:23:40 +0000 https://cve.radiocsirt.org/vuln/certa-2012-avi-066 certa-2012-avi-066 https://cve.radiocsirt.org/vuln/certa-2012-avi-066 https://cve.radiocsirt.org/vuln/euvd-2026-114549 EUVD-2026-114549 https://cve.radiocsirt.org/vuln/euvd-2026-114549 https://cve.radiocsirt.org/vuln/fkie_cve-2011-1184 <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, related to lack of checking of nonce (aka server nonce) and nc (aka nonce-count or client nonce count) values.</p> <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, related to lack of checking of nonce (aka server nonce) and nc (aka nonce-count or client nonce count) values.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-1184 https://cve.radiocsirt.org/vuln/ghsa-q9xf-jwr4-v445 <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, related to lack of checking of nonce (aka server nonce) and nc (aka nonce-count or client nonce count) values.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, related to lack of checking of nonce (aka server nonce) and nc (aka nonce-count or client nonce count) values.</p> https://cve.radiocsirt.org/vuln/ghsa-q9xf-jwr4-v445 https://cve.radiocsirt.org/vuln/gsd-2011-1184 gsd-2011-1184 https://cve.radiocsirt.org/vuln/gsd-2011-1184 https://cve.radiocsirt.org/vuln/rhsa-2011:1780 <p>tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: password disclosure vulnerability tomcat: security manager restrictions bypass tomcat: authentication bypass and information disclosure tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication</p> <p>tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: password disclosure vulnerability tomcat: security manager restrictions bypass tomcat: authentication bypass and information disclosure tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication</p> https://cve.radiocsirt.org/vuln/rhsa-2011:1780