https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:15:52 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-06637 bdu:2022-06637 https://cve.radiocsirt.org/vuln/bdu:2022-06637 https://cve.radiocsirt.org/vuln/euvd-2026-99359 EUVD-2026-99359 https://cve.radiocsirt.org/vuln/euvd-2026-99359 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3623 <p>Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vectors.</p> <p>Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3623 https://cve.radiocsirt.org/vuln/ghsa-99v3-9x35-c5vf <p><strong>Affected:</strong> Maven: org.apache.ws.security:wss4j, Maven: org.apache.wss4j:wss4j-ws-security-dom</p> <p>Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vectors.</p> <p><strong>Affected:</strong> Maven: org.apache.ws.security:wss4j, Maven: org.apache.wss4j:wss4j-ws-security-dom</p> <p>Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-99v3-9x35-c5vf https://cve.radiocsirt.org/vuln/gsd-2014-3623 gsd-2014-3623 https://cve.radiocsirt.org/vuln/gsd-2014-3623 https://cve.radiocsirt.org/vuln/rhsa-2014:2019 <p>CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods</p> <p>CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods</p> https://cve.radiocsirt.org/vuln/rhsa-2014:2019 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375