<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T06:11:39.301947+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2020-01960</id>
    <title>bdu:2020-01960</title>
    <updated>2026-10-03T06:11:39.312632+00:00</updated>
    <content>bdu:2020-01960</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2020-01960"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cnvd-2020-03927</id>
    <title>cnvd-2020-03927</title>
    <updated>2026-10-03T06:11:39.312669+00:00</updated>
    <content>cnvd-2020-03927</content>
    <link href="https://cve.radiocsirt.org/vuln/cnvd-2020-03927"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-58440</id>
    <title>EUVD-2026-58440</title>
    <updated>2026-10-03T06:11:39.312684+00:00</updated>
    <content>EUVD-2026-58440</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-58440"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2019-17570</id>
    <title>fkie_cve-2019-17570</title>
    <updated>2026-10-03T06:11:39.312695+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-RPC is no longer maintained and this issue will not be fixed.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2019-17570"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-6vwp-35w3-xph8</id>
    <title>GHSA-6vwp-35w3-xph8 — Insecure Deserialization in Apache XML-RPC</title>
    <updated>2026-10-03T06:11:39.312724+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Maven: org.apache.xmlrpc:xmlrpc</p>
<p>An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code.</p>
<p>Apache XML-RPC is no longer maintained and this issue will not be fixed.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-6vwp-35w3-xph8"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2019-17570</id>
    <title>gsd-2019-17570</title>
    <updated>2026-10-03T06:11:39.312756+00:00</updated>
    <content>gsd-2019-17570</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2019-17570"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2022-1545</id>
    <title>OESA-2022-1545 — xmlrpc security update</title>
    <updated>2026-10-03T06:11:39.312768+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: xmlrpc, openEuler:20.03-LTS-SP2: xmlrpc, openEuler:20.03-LTS-SP3: xmlrpc</p>
<p>Apache XML-RPC is a Java implementation of XML-RPC, a popular protocol that uses XML over HTTP to implement remote procedure calls. Apache XML-RPC was previously known as Helma XML-RPC. If you have code using the Helma library, all you should have to do is change the import statements in your code from helma.xmlrpc.* to org.apache.xmlrpc.*.

Security Fix(es):

An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-RPC is no longer maintained and this issue will not be fixed.(CVE-2019-17570)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2022-1545"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhsa-2020:0310</id>
    <title>RHSA-2020:0310 — Red Hat Security Advisory: rh-java-common-xmlrpc security update</title>
    <updated>2026-10-03T06:11:39.312793+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>xmlrpc: Deserialization of server-side exception from faultCause in XMLRPC error response</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhsa-2020:0310"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-17570</id>
    <title>UBUNTU-CVE-2019-17570</title>
    <updated>2026-10-03T06:11:39.312811+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:16.04:LTS: libxmlrpc3-java, Ubuntu:18.04:LTS: libxmlrpc3-java</p>
<p>An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-RPC is no longer maintained and this issue will not be fixed.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-17570"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1390</id>
    <title>WID-SEC-W-2023-1390 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes</title>
    <updated>2026-10-03T06:11:39.312831+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1390"/>
  </entry>
</feed>
