https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:14:12.270394+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-06318 bdu:2022-06318 2026-10-03T02:14:12.394560+00:00 bdu:2022-06318 https://cve.radiocsirt.org/vuln/certfr-2014-ale-004 certfr-2014-ale-004 — Une vulnérabilité a été corrigée dans <span class="textit">Apache Struts</span>. Elle permet à un attaquant de provoque… 2026-10-03T02:14:12.394599+00:00 certfr-2014-ale-004 https://cve.radiocsirt.org/vuln/certfr-2014-avi-111 certfr-2014-avi-111 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Apache Struts</span>. Elles permettent à un att… 2026-10-03T02:14:12.394618+00:00 certfr-2014-avi-111 https://cve.radiocsirt.org/vuln/euvd-2026-96632 EUVD-2026-96632 2026-10-03T02:14:12.394632+00:00 EUVD-2026-96632 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0094 fkie_cve-2014-0094 2026-10-03T02:14:12.394643+00:00

The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.

 https://cve.radiocsirt.org/vuln/ghsa-vrwc-qjmw-5rjm GHSA-vrwc-qjmw-5rjm — ClassLoader manipulation in Apache Struts 2026-10-03T02:14:12.394671+00:00

Affected: Maven: org.apache.struts:struts2-core, Maven: org.apache.struts.xwork:xwork-core

The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.

 https://cve.radiocsirt.org/vuln/gsd-2014-0094 gsd-2014-0094 2026-10-03T02:14:12.394696+00:00 gsd-2014-0094 https://cve.radiocsirt.org/vuln/jvndb-2014-000045 jvndb-2014-000045 2026-10-03T02:14:12.394707+00:00

Apache Struts provided by the Apache Software Foundation is a software framework for creating Java web applications. Apache Struts contains a vulnerability where the ClassLoader may be manipulated. NTT-CERT reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.