Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:50:33 +0000 EUVD-2026-111070 https://cve.radiocsirt.org/vuln/euvd-2026-111070 EUVD-2026-111070 https://cve.radiocsirt.org/vuln/euvd-2026-111070 fkie_cve-2012-2379 https://cve.radiocsirt.org/vuln/fkie_cve-2012-2379 <p>Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted, which has unspecified impact and attack vectors.</p> <p>Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted, which has unspecified impact and attack vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-2379 GHSA-2g99-c67p-56hm — XML Signature/Encryption Not Validated in Apache CXF https://cve.radiocsirt.org/vuln/ghsa-2g99-c67p-56hm <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf</p> <p>Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted, which has unspecified impact and attack vectors.</p> <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf</p> <p>Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted, which has unspecified impact and attack vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-2g99-c67p-56hm gsd-2012-2379 https://cve.radiocsirt.org/vuln/gsd-2012-2379 gsd-2012-2379 https://cve.radiocsirt.org/vuln/gsd-2012-2379 RHSA-2012:1559 — Red Hat Security Advisory: JBoss Enterprise BRMS Platform 5.3.0 security update https://cve.radiocsirt.org/vuln/rhsa-2012:1559 <p>apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token</p> <p>apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token</p> https://cve.radiocsirt.org/vuln/rhsa-2012:1559