Most recent entries from all

bdu:2023-05299

2026-10-03T18:59:32.649901+00:00

bdu:2023-05299

cnvd-2020-60318

2026-10-03T18:59:32.649943+00:00

cnvd-2020-60318

EUVD-2026-43747

2026-10-03T18:59:32.649958+00:00

EUVD-2026-43747

fkie_cve-2020-17510

2026-10-03T18:59:32.649971+00:00

Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.

GHSA-7cj4-gj8m-m2f7 — Authentication bypass in Apache Shiro

2026-10-03T18:59:32.650001+00:00

Affected: Maven: org.apache.shiro:shiro-spring

Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.

gsd-2020-17510

2026-10-03T18:59:32.650024+00:00

gsd-2020-17510

RHSA-2021:3140 — Red Hat Security Advisory: Red Hat Fuse 7.9.0 release and security update

2026-10-03T18:59:32.650036+00:00

log4j: Socket receiver deserialization vulnerability snakeyaml: Billion laughs attack via alias feature apache-commons-compress: Infinite loop in name encoding algorithm wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in use netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class olingo-odata: Server side request forgery in AsyncResponseWrapperImpl tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability spring-cloud-config-server: sending a request using a specially crafted URL can lead to a directory traversal attack springframework: RFD protection bypass via jsessionid Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371 tomcat: deserialization flaw in session persistence storage leading to RCE RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack hibernate-validator: Improper input validation in the interpolation of constraint error messages wildfly-elytron: session fixation when using FORM authentication undertow: invalid HTTP request with large chunk size tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS a…

UBUNTU-CVE-2020-17510

2026-10-03T18:59:32.650131+00:00

Affected: Ubuntu:Pro:16.04:LTS: shiro, Ubuntu:Pro:18.04:LTS: shiro, Ubuntu:20.04:LTS: shiro, Ubuntu:22.04:LTS: shiro

Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.