https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:02:16 +0000 https://cve.radiocsirt.org/vuln/certa-2013-avi-145 certa-2013-avi-145 https://cve.radiocsirt.org/vuln/certa-2013-avi-145 https://cve.radiocsirt.org/vuln/euvd-2026-113297 EUVD-2026-113297 https://cve.radiocsirt.org/vuln/euvd-2026-113297 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5887 <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.</p> <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-5887 https://cve.radiocsirt.org/vuln/ghsa-28cq-6rmx-pjq4 <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.</p> https://cve.radiocsirt.org/vuln/ghsa-28cq-6rmx-pjq4 https://cve.radiocsirt.org/vuln/gsd-2012-5887 gsd-2012-5887 https://cve.radiocsirt.org/vuln/gsd-2012-5887 https://cve.radiocsirt.org/vuln/rhsa-2013:0265 <p>tomcat: HTTP NIO connector OOM DoS via a request with large headers Tomcat/JBoss Web - Bypass of CSRF prevention filter Tomcat - Denial Of Service when using NIO+SSL+sendfile tomcat: three DIGEST authentication implementation issues tomcat: three DIGEST authentication implementation issues tomcat: three DIGEST authentication implementation issues</p> <p>tomcat: HTTP NIO connector OOM DoS via a request with large headers Tomcat/JBoss Web - Bypass of CSRF prevention filter Tomcat - Denial Of Service when using NIO+SSL+sendfile tomcat: three DIGEST authentication implementation issues tomcat: three DIGEST authentication implementation issues tomcat: three DIGEST authentication implementation issues</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0265