Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:03:21 +0000 cnvd-2015-01091 https://cve.radiocsirt.org/vuln/cnvd-2015-01091 cnvd-2015-01091 https://cve.radiocsirt.org/vuln/cnvd-2015-01091 EUVD-2026-89214 https://cve.radiocsirt.org/vuln/euvd-2026-89214 EUVD-2026-89214 https://cve.radiocsirt.org/vuln/euvd-2026-89214 fkie_cve-2015-0226 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0226 <p>Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-2487.</p> <p>Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-2487.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-0226 GHSA-vjwc-5hfh-2vv5 — Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J https://cve.radiocsirt.org/vuln/ghsa-vjwc-5hfh-2vv5 <p><strong>Affected:</strong> Maven: org.apache.ws.security:wss4j, Maven: org.apache.wss4j:wss4j-ws-security-dom</p> <p>Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-2487.</p> <p><strong>Affected:</strong> Maven: org.apache.ws.security:wss4j, Maven: org.apache.wss4j:wss4j-ws-security-dom</p> <p>Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-2487.</p> https://cve.radiocsirt.org/vuln/ghsa-vjwc-5hfh-2vv5 gsd-2015-0226 https://cve.radiocsirt.org/vuln/gsd-2015-0226 gsd-2015-0226 https://cve.radiocsirt.org/vuln/gsd-2015-0226 RHSA-2015:0773 — Red Hat Security Advisory: Red Hat JBoss Data Grid 6.4.1 update https://cve.radiocsirt.org/vuln/rhsa-2015:0773 <p>OpenJDK: XML parsing Denial of Service (JAXP, 8017298) RESTeasy: External entities expanded by DocumentProvider Weld: Limited information disclosure via stale thread state wss4j: Apache WSS4J is vulnerable to Bleichenbacher&#39;s attack (incomplete fix for CVE-2011-2487) wss4j: Apache WSS4J doesn&#39;t correctly enforce the requireSignedEncryptedDataElements property</p> <p>OpenJDK: XML parsing Denial of Service (JAXP, 8017298) RESTeasy: External entities expanded by DocumentProvider Weld: Limited information disclosure via stale thread state wss4j: Apache WSS4J is vulnerable to Bleichenbacher&#39;s attack (incomplete fix for CVE-2011-2487) wss4j: Apache WSS4J doesn&#39;t correctly enforce the requireSignedEncryptedDataElements property</p> https://cve.radiocsirt.org/vuln/rhsa-2015:0773 Withdrawn: UBUNTU-CVE-2015-0226 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0226 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: wss4j</p> <p>Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-2487.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: wss4j</p> <p>Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-2487.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0226