https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:17:35 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-96659 EUVD-2026-96659 https://cve.radiocsirt.org/vuln/euvd-2026-96659 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0074 <p>Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty (1) username or (2) password.</p> <p>Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty (1) username or (2) password.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-0074 https://cve.radiocsirt.org/vuln/ghsa-9486-j794-vqc4 <p>Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty (1) username or (2) password.</p> <p>Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty (1) username or (2) password.</p> https://cve.radiocsirt.org/vuln/ghsa-9486-j794-vqc4 https://cve.radiocsirt.org/vuln/gsd-2014-0074 gsd-2014-0074 https://cve.radiocsirt.org/vuln/gsd-2014-0074 https://cve.radiocsirt.org/vuln/rhsa-2014:1351 <p>CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy Shiro: successful authentication without specifying user name or password Xalan-Java: insufficient constraints in secure processing feature CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill netty: DoS via memory exhaustion during data aggregation Framework: Information disclosure via SSRF</p> <p>CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy Shiro: successful authentication without specifying user name or password Xalan-Java: insufficient constraints in secure processing feature CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill netty: DoS via memory exhaustion during data aggregation Framework: Information disclosure via SSRF</p> https://cve.radiocsirt.org/vuln/rhsa-2014:1351