https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:36:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-00616 bdu:2016-00616 https://cve.radiocsirt.org/vuln/bdu:2016-00616 https://cve.radiocsirt.org/vuln/certfr-2016-avi-350 certfr-2016-avi-350 https://cve.radiocsirt.org/vuln/certfr-2016-avi-350 https://cve.radiocsirt.org/vuln/cnvd-2016-01382 cnvd-2016-01382 https://cve.radiocsirt.org/vuln/cnvd-2016-01382 https://cve.radiocsirt.org/vuln/euvd-2026-81531 EUVD-2026-81531 https://cve.radiocsirt.org/vuln/euvd-2026-81531 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0763 <p>The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context.</p> <p>The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-0763 https://cve.radiocsirt.org/vuln/ghsa-9hjv-9h75-xmpp <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The `setGlobalContext` method in `org/apache/naming/factory/ResourceLinkFactory.java` in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>The `setGlobalContext` method in `org/apache/naming/factory/ResourceLinkFactory.java` in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context.</p> https://cve.radiocsirt.org/vuln/ghsa-9hjv-9h75-xmpp https://cve.radiocsirt.org/vuln/gsd-2016-0763 gsd-2016-0763 https://cve.radiocsirt.org/vuln/gsd-2016-0763 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10446-1 <p>tomcat-8.0.36-3.3 on GA media</p> <p>tomcat-8.0.36-3.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10446-1 https://cve.radiocsirt.org/vuln/rhsa-2016:1087 <p>tomcat: directory disclosure tomcat: Session fixation tomcat: CSRF token leak tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms tomcat: security manager bypass via setGlobalContext()</p> <p>tomcat: directory disclosure tomcat: Session fixation tomcat: CSRF token leak tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms tomcat: security manager bypass via setGlobalContext()</p> https://cve.radiocsirt.org/vuln/rhsa-2016:1087 https://cve.radiocsirt.org/vuln/suse-su-2016:0769-1 <p>Security update for tomcat</p> <p>Security update for tomcat</p> https://cve.radiocsirt.org/vuln/suse-su-2016:0769-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0763 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat6</p> <p>The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat6, Ubuntu:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat6</p> <p>The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0763 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1277 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1277