https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T09:34:05.125292+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2018-1336 CVE-2018-1336 2026-09-29T09:34:05.179479+00:00

Affected: Apache Software Foundation Apache Tomcat

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86.

 https://vulnerability.circl.lu/vuln/usn-3723-1 USN-3723-1 — tomcat7, tomcat8 vulnerabilities 2026-09-29T09:34:05.179592+00:00

Affected: Ubuntu:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat8

It was discovered that Tomcat incorrectly handled decoding certain UTF-8 strings. A remote attacker could possibly use this issue to cause Tomcat to crash, resulting in a denial of service. (CVE-2018-1336)

It was discovered that the Tomcat WebSocket client incorrectly performed hostname verification. A remote attacker could possibly use this issue to intercept sensitive information. (CVE-2018-8034)