https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:10:02.531166+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-96781 EUVD-2026-96781 2026-10-02T12:10:02.619197+00:00 EUVD-2026-96781 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0225 fkie_cve-2014-0225 2026-10-02T12:10:02.619249+00:00

When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack.

 https://cve.radiocsirt.org/vuln/ghsa-f93f-g33r-8pcp GHSA-f93f-g33r-8pcp — Improper Restriction of XML External Entity Reference in Spring Framework 2026-10-02T12:10:02.619282+00:00

Affected: Maven: org.springframework:spring-webmvc

When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack.

 https://cve.radiocsirt.org/vuln/gsd-2014-0225 gsd-2014-0225 2026-10-02T12:10:02.619310+00:00 gsd-2014-0225 https://cve.radiocsirt.org/vuln/rhsa-2014:1351 RHSA-2014:1351 — Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.1.0 security update 2026-10-02T12:10:02.619322+00:00

CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy Shiro: successful authentication without specifying user name or password Xalan-Java: insufficient constraints in secure processing feature CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill netty: DoS via memory exhaustion during data aggregation Framework: Information disclosure via SSRF

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0225 UBUNTU-CVE-2014-0225 2026-10-02T12:10:02.619348+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java

When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack.