Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:30:07 +0000 EUVD-2026-104586 https://cve.radiocsirt.org/vuln/euvd-2026-104586 EUVD-2026-104586 https://cve.radiocsirt.org/vuln/euvd-2026-104586 fkie_cve-2013-0239 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0239 <p>Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element that lacks a password child element.</p> <p>Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element that lacks a password child element.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-0239 GHSA-p5c5-6564-vvr8 — Improper Authentication in Apache CXF https://cve.radiocsirt.org/vuln/ghsa-p5c5-6564-vvr8 <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-rt-frontend-jaxrs</p> <p>Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element that lacks a password child element.</p> <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-rt-frontend-jaxrs</p> <p>Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element that lacks a password child element.</p> https://cve.radiocsirt.org/vuln/ghsa-p5c5-6564-vvr8 gsd-2013-0239 https://cve.radiocsirt.org/vuln/gsd-2013-0239 gsd-2013-0239 https://cve.radiocsirt.org/vuln/gsd-2013-0239 RHSA-2013:0644 — Red Hat Security Advisory: apache-cxf security update https://cve.radiocsirt.org/vuln/rhsa-2013:0644 <p>apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor apache-cxf: UsernameTokenPolicyValidator and UsernameTokenInterceptor allow empty passwords to authenticate</p> <p>apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor apache-cxf: UsernameTokenPolicyValidator and UsernameTokenInterceptor allow empty passwords to authenticate</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0644