https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:48:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-96910 EUVD-2026-96910 https://cve.radiocsirt.org/vuln/euvd-2026-96910 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0364 <p>The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute.</p> <p>The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-0364 https://cve.radiocsirt.org/vuln/ghsa-5xpq-f27x-7pw7 <p>The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute.</p> <p>The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute.</p> https://cve.radiocsirt.org/vuln/ghsa-5xpq-f27x-7pw7 https://cve.radiocsirt.org/vuln/gsd-2014-0364 gsd-2014-0364 https://cve.radiocsirt.org/vuln/gsd-2014-0364 https://cve.radiocsirt.org/vuln/rhsa-2014:0818 <p>Xalan-Java: insufficient constraints in secure processing feature netty: DoS via memory exhaustion during data aggregation smack: incorrect X.509 certificate validation smack: IQ response spoofing</p> <p>Xalan-Java: insufficient constraints in secure processing feature netty: DoS via memory exhaustion during data aggregation smack: incorrect X.509 certificate validation smack: IQ response spoofing</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0818