https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:22:27 +0000 https://cve.radiocsirt.org/vuln/certa-2013-avi-145 certa-2013-avi-145 https://cve.radiocsirt.org/vuln/certa-2013-avi-145 https://cve.radiocsirt.org/vuln/euvd-2026-113313 EUVD-2026-113313 https://cve.radiocsirt.org/vuln/euvd-2026-113313 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5886 <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.</p> <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-5886 https://cve.radiocsirt.org/vuln/ghsa-9xrj-439h-62hg <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat-catalina</p> <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat-catalina</p> <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.</p> https://cve.radiocsirt.org/vuln/ghsa-9xrj-439h-62hg https://cve.radiocsirt.org/vuln/gsd-2012-5886 gsd-2012-5886 https://cve.radiocsirt.org/vuln/gsd-2012-5886 https://cve.radiocsirt.org/vuln/rhsa-2013:0265 <p>tomcat: HTTP NIO connector OOM DoS via a request with large headers Tomcat/JBoss Web - Bypass of CSRF prevention filter Tomcat - Denial Of Service when using NIO+SSL+sendfile tomcat: three DIGEST authentication implementation issues tomcat: three DIGEST authentication implementation issues tomcat: three DIGEST authentication implementation issues</p> <p>tomcat: HTTP NIO connector OOM DoS via a request with large headers Tomcat/JBoss Web - Bypass of CSRF prevention filter Tomcat - Denial Of Service when using NIO+SSL+sendfile tomcat: three DIGEST authentication implementation issues tomcat: three DIGEST authentication implementation issues tomcat: three DIGEST authentication implementation issues</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0265