https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:32:46 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-96611 EUVD-2026-96611 https://cve.radiocsirt.org/vuln/euvd-2026-96611 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0035 <p>The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.</p> <p>The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-0035 https://cve.radiocsirt.org/vuln/ghsa-v45r-rj5x-hpg2 <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-core</p> <p>The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.</p> <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-core</p> <p>The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.</p> https://cve.radiocsirt.org/vuln/ghsa-v45r-rj5x-hpg2 https://cve.radiocsirt.org/vuln/gsd-2014-0035 gsd-2014-0035 https://cve.radiocsirt.org/vuln/gsd-2014-0035 https://cve.radiocsirt.org/vuln/rhsa-2014:0797 <p>CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill JAX-RS: Information disclosure via XML eXternal Entity (XXE)</p> <p>CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill JAX-RS: Information disclosure via XML eXternal Entity (XXE)</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0797