https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:33:40 +0000 https://cve.radiocsirt.org/vuln/certa-2013-avi-145 certa-2013-avi-145 https://cve.radiocsirt.org/vuln/certa-2013-avi-145 https://cve.radiocsirt.org/vuln/euvd-2026-113321 EUVD-2026-113321 https://cve.radiocsirt.org/vuln/euvd-2026-113321 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5885 <p>The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184.</p> <p>The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-5885 https://cve.radiocsirt.org/vuln/ghsa-99rf-92v6-cwx4 <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184.</p> https://cve.radiocsirt.org/vuln/ghsa-99rf-92v6-cwx4 https://cve.radiocsirt.org/vuln/gsd-2012-5885 gsd-2012-5885 https://cve.radiocsirt.org/vuln/gsd-2012-5885 https://cve.radiocsirt.org/vuln/rhsa-2013:0265 <p>tomcat: HTTP NIO connector OOM DoS via a request with large headers Tomcat/JBoss Web - Bypass of CSRF prevention filter Tomcat - Denial Of Service when using NIO+SSL+sendfile tomcat: three DIGEST authentication implementation issues tomcat: three DIGEST authentication implementation issues tomcat: three DIGEST authentication implementation issues</p> <p>tomcat: HTTP NIO connector OOM DoS via a request with large headers Tomcat/JBoss Web - Bypass of CSRF prevention filter Tomcat - Denial Of Service when using NIO+SSL+sendfile tomcat: three DIGEST authentication implementation issues tomcat: three DIGEST authentication implementation issues tomcat: three DIGEST authentication implementation issues</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0265