https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:42:26 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-08442 cnvd-2015-08442 https://cve.radiocsirt.org/vuln/cnvd-2015-08442 https://cve.radiocsirt.org/vuln/euvd-2026-93326 EUVD-2026-93326 https://cve.radiocsirt.org/vuln/euvd-2026-93326 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5348 <p>Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.</p> <p>Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-5348 https://cve.radiocsirt.org/vuln/ghsa-26v6-w6fw-rh94 <p><strong>Affected:</strong> Maven: org.apache.camel:camel-jetty, Maven: org.apache.camel:camel-servlet, Maven: org.apache.camel:camel-http, Maven: org.apache.camel:camel-http-common, Maven: org.apache.camel:camel-http4, Maven: org.apache.camel:camel-ahc</p> <p>Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.</p> <p><strong>Affected:</strong> Maven: org.apache.camel:camel-jetty, Maven: org.apache.camel:camel-servlet, Maven: org.apache.camel:camel-http, Maven: org.apache.camel:camel-http-common, Maven: org.apache.camel:camel-http4, Maven: org.apache.camel:camel-ahc</p> <p>Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.</p> https://cve.radiocsirt.org/vuln/ghsa-26v6-w6fw-rh94 https://cve.radiocsirt.org/vuln/gsd-2015-5348 gsd-2015-5348 https://cve.radiocsirt.org/vuln/gsd-2015-5348 https://cve.radiocsirt.org/vuln/rhsa-2016:2035 <p>Framework: denial-of-service attack with XML input ObjectMessage: unsafe deserialization camel-xstream: Java object de-serialization vulnerability leads to RCE Camel: Java object deserialisation in Jetty/Servlet bouncycastle: Invalid curve attack allowing to extract private keys JGroups: Authorization bypass bsh2: remote code execution via deserialization shiro: Security constraint bypass</p> <p>Framework: denial-of-service attack with XML input ObjectMessage: unsafe deserialization camel-xstream: Java object de-serialization vulnerability leads to RCE Camel: Java object deserialisation in Jetty/Servlet bouncycastle: Invalid curve attack allowing to extract private keys JGroups: Authorization bypass bsh2: remote code execution via deserialization shiro: Security constraint bypass</p> https://cve.radiocsirt.org/vuln/rhsa-2016:2035 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3616 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Fuse und Red Hat JBoss A-MQ ausnutzen, um einen Denial of Service Angriff durchzuführen, Code mit den Privilegien des angegriffenen Dienstes zur Ausführung bringen, vertrauliche Daten einzusehen, Informationen zu manipulieren oder Sicherheitsmechanismen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Fuse und Red Hat JBoss A-MQ ausnutzen, um einen Denial of Service Angriff durchzuführen, Code mit den Privilegien des angegriffenen Dienstes zur Ausführung bringen, vertrauliche Daten einzusehen, Informationen zu manipulieren oder Sicherheitsmechanismen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3616