https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:30:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-00402 bdu:2015-00402 https://cve.radiocsirt.org/vuln/bdu:2015-00402 https://cve.radiocsirt.org/vuln/certfr-2014-avi-208 certfr-2014-avi-208 https://cve.radiocsirt.org/vuln/certfr-2014-avi-208 https://cve.radiocsirt.org/vuln/euvd-2026-96693 EUVD-2026-96693 https://cve.radiocsirt.org/vuln/euvd-2026-96693 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0112 <p>ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to &#34;manipulate&#34; the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.</p> <p>ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to &#34;manipulate&#34; the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-0112 https://cve.radiocsirt.org/vuln/ghsa-prjv-jj26-wf8h <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to &#34;manipulate&#34; the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.</p> <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to &#34;manipulate&#34; the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.</p> https://cve.radiocsirt.org/vuln/ghsa-prjv-jj26-wf8h https://cve.radiocsirt.org/vuln/gsd-2014-0112 gsd-2014-0112 https://cve.radiocsirt.org/vuln/gsd-2014-0112 https://cve.radiocsirt.org/vuln/jvndb-2014-000045 <p>Apache Struts provided by the Apache Software Foundation is a software framework for creating Java web applications. Apache Struts contains a vulnerability where the ClassLoader may be manipulated. NTT-CERT reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Apache Struts provided by the Apache Software Foundation is a software framework for creating Java web applications. Apache Struts contains a vulnerability where the ClassLoader may be manipulated. NTT-CERT reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2014-000045 https://cve.radiocsirt.org/vuln/rhsa-2019:0910 <p>struts2: ClassLoader manipulation via request parameters jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper jetty: HTTP request smuggling camel: Directory traversal in file producer</p> <p>struts2: ClassLoader manipulation via request parameters jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper jetty: HTTP request smuggling camel: Directory traversal in file producer</p> https://cve.radiocsirt.org/vuln/rhsa-2019:0910 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2068 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2068