https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:09:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-01719 bdu:2016-01719 https://cve.radiocsirt.org/vuln/bdu:2016-01719 https://cve.radiocsirt.org/vuln/certfr-2018-avi-291 certfr-2018-avi-291 https://cve.radiocsirt.org/vuln/certfr-2018-avi-291 https://cve.radiocsirt.org/vuln/cnvd-2015-03166 cnvd-2015-03166 https://cve.radiocsirt.org/vuln/cnvd-2015-03166 https://cve.radiocsirt.org/vuln/euvd-2026-89836 EUVD-2026-89836 https://cve.radiocsirt.org/vuln/euvd-2026-89836 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0899 <p>The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter.</p> <p>The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-0899 https://cve.radiocsirt.org/vuln/ghsa-cvvx-r33m-v7pq <p><strong>Affected:</strong> Maven: org.apache.struts:struts-core, Maven: struts:struts</p> <p>The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter.</p> <p><strong>Affected:</strong> Maven: org.apache.struts:struts-core, Maven: struts:struts</p> <p>The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-cvvx-r33m-v7pq https://cve.radiocsirt.org/vuln/gsd-2015-0899 gsd-2015-0899 https://cve.radiocsirt.org/vuln/gsd-2015-0899 https://cve.radiocsirt.org/vuln/jvndb-2015-000042 <p>The TERASOLUNA Server Framework for Java(WEB) provided by NTT Data Corporation is a software framework for creating web applications. The TERASOLUNA Server Framework for Java(WEB) is vulnerable to an issue contained in the Apache Struts 1 Validator, since it uses Apache Struts 1.2.9. The Validator in Apache Struts 1.1 and later contains a function (MPV -- Multi Page Validator) to efficiently define rules for input validation across multiple pages during screen transitions. The MPV contains a vulnerability where input validation may be bypassed. When the Apache Struts 1 Validator is used, the web application may be vulnerable even when the MPV is not used explicitly.</p> <p>The TERASOLUNA Server Framework for Java(WEB) provided by NTT Data Corporation is a software framework for creating web applications. The TERASOLUNA Server Framework for Java(WEB) is vulnerable to an issue contained in the Apache Struts 1 Validator, since it uses Apache Struts 1.2.9. The Validator in Apache Struts 1.1 and later contains a function (MPV -- Multi Page Validator) to efficiently define rules for input validation across multiple pages during screen transitions. The MPV contains a vulnerability where input validation may be bypassed. When the Apache Struts 1 Validator is used, the web application may be vulnerable even when the MPV is not used explicitly.</p> https://cve.radiocsirt.org/vuln/jvndb-2015-000042 https://cve.radiocsirt.org/vuln/suse-su-2015:0886-1 <p>Security update for struts</p> <p>Security update for struts</p> https://cve.radiocsirt.org/vuln/suse-su-2015:0886-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1594 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1594