Most recent entries from all

cnvd-2017-06141

2026-10-03T14:48:53.098282+00:00

cnvd-2017-06141

EUVD-2026-73536

2026-10-03T14:48:53.098321+00:00

EUVD-2026-73536

fkie_cve-2017-5653

2026-10-03T14:48:53.098337+00:00

JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers.

GHSA-hgg6-8x62-m9gf — Improper Certificate Validation in Apache CXF

2026-10-03T14:48:53.098368+00:00

Affected: Maven: org.apache.cxf:cxf-core

JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers.

gsd-2017-5653

2026-10-03T14:48:53.098409+00:00

gsd-2017-5653

RHSA-2017:1832 — Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R4 security and bug fix update

2026-10-03T14:48:53.098421+00:00

bouncycastle: Information disclosure in GCMBlockCipher camel-jacksonxml: Unmarshalling operation are vulnerable to RCE Security: Improper handling of path parameters allows bypassing the security constraint hawtio: Proxy is sharing cookies among all the clients hawtio: information Disclosure flaws due to unsafe path traversal cxf: CXF OAuth2 Hawk and JOSE MAC Validation code are vulnerable to timing attacks camel-core: Validation component vulnerable to SSRF via remote DTDs and XXE cxf: CXF JAX-RS XML Security streaming clients do not validate that the service response was signed or encrypted cxf: CXF's STSClient uses a flawed way of caching tokens that are associated with delegation tokens logback: Serialization vulnerability in SocketServer and ServerSocketReceiver XStream: DoS when unmarshalling void type