https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:16:14.364143+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-34229 cnvd-2017-34229 2026-10-03T01:16:14.438960+00:00 cnvd-2017-34229 https://cve.radiocsirt.org/vuln/euvd-2026-177278 EUVD-2026-177278 2026-10-03T01:16:14.438997+00:00 EUVD-2026-177278 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12624 fkie_cve-2017-12624 2026-10-03T01:16:14.439012+00:00

Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service (DoS) attack on a CXF web service provider. Both JAX-WS and JAX-RS services are vulnerable to this attack. From Apache CXF 3.2.1 and 3.1.14, message attachment headers that are greater than 300 characters will be rejected by default. This value is configurable via the property "attachment-max-header-size".

 https://cve.radiocsirt.org/vuln/ghsa-7vgj-8mw4-hg8r GHSA-7vgj-8mw4-hg8r — Improper Input Validation in Apache CXF 2026-10-03T01:16:14.439045+00:00

Affected: Maven: org.apache.cxf:cxf-core

Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service (DoS) attack on a CXF web service provider. Both JAX-WS and JAX-RS services are vulnerable to this attack. From Apache CXF 3.2.1 and 3.1.14, message attachment headers that are greater than 300 characters will be rejected by default. This value is configurable via the property "attachment-max-header-size".

 https://cve.radiocsirt.org/vuln/gsd-2017-12624 gsd-2017-12624 2026-10-03T01:16:14.439073+00:00 gsd-2017-12624 https://cve.radiocsirt.org/vuln/rhsa-2018:2423 RHSA-2018:2423 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.4 on RHEL 6 security update 2026-10-03T01:16:14.439086+00:00

cxf: Improper size validation in message attachment header for JAX-WS and JAX-RS services apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.* guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) bouncycastle: flaw in the low-level interface to RSA key pair generator

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1594 WID-SEC-W-2023-1594 — IBM Tivoli Network Manager: Mehrere Schwachstellen 2026-10-03T01:16:14.439112+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuführen.