https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:48:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-96781 EUVD-2026-96781 https://cve.radiocsirt.org/vuln/euvd-2026-96781 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0225 <p>When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack.</p> <p>When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-0225 https://cve.radiocsirt.org/vuln/ghsa-f93f-g33r-8pcp <p><strong>Affected:</strong> Maven: org.springframework:spring-webmvc</p> <p>When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack.</p> <p><strong>Affected:</strong> Maven: org.springframework:spring-webmvc</p> <p>When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack.</p> https://cve.radiocsirt.org/vuln/ghsa-f93f-g33r-8pcp https://cve.radiocsirt.org/vuln/gsd-2014-0225 gsd-2014-0225 https://cve.radiocsirt.org/vuln/gsd-2014-0225 https://cve.radiocsirt.org/vuln/rhsa-2014:1351 <p>CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy Shiro: successful authentication without specifying user name or password Xalan-Java: insufficient constraints in secure processing feature CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill netty: DoS via memory exhaustion during data aggregation Framework: Information disclosure via SSRF</p> <p>CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy Shiro: successful authentication without specifying user name or password Xalan-Java: insufficient constraints in secure processing feature CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill netty: DoS via memory exhaustion during data aggregation Framework: Information disclosure via SSRF</p> https://cve.radiocsirt.org/vuln/rhsa-2014:1351 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0225 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspring-java</p> <p>When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspring-java</p> <p>When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0225