https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:46:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2017-02651 bdu:2017-02651 https://cve.radiocsirt.org/vuln/bdu:2017-02651 https://cve.radiocsirt.org/vuln/certfr-2016-avi-348 certfr-2016-avi-348 https://cve.radiocsirt.org/vuln/certfr-2016-avi-348 https://cve.radiocsirt.org/vuln/cnvd-2015-07906 cnvd-2015-07906 https://cve.radiocsirt.org/vuln/cnvd-2015-07906 https://cve.radiocsirt.org/vuln/euvd-2026-95037 EUVD-2026-95037 https://cve.radiocsirt.org/vuln/euvd-2026-95037 https://cve.radiocsirt.org/vuln/fkie_cve-2015-7501 <p>Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.</p> <p>Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-7501 https://cve.radiocsirt.org/vuln/ghsa-fjq5-5j5f-mvxh <p><strong>Affected:</strong> Maven: commons-collections:commons-collections, Maven: org.apache.commons:commons-collections4, Maven: org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-collections, Maven: net.sourceforge.collections:collections-generic, Maven: org.apache.servicemix.bundles:org.apache.servicemix.bundles.collections-generic</p> <p>It was found that the Apache commons-collections library permitted code execution when deserializing objects involving a specially constructed chain of classes. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using the commons-collections library.</p> <p><strong>Affected:</strong> Maven: commons-collections:commons-collections, Maven: org.apache.commons:commons-collections4, Maven: org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-collections, Maven: net.sourceforge.collections:collections-generic, Maven: org.apache.servicemix.bundles:org.apache.servicemix.bundles.collections-generic</p> <p>It was found that the Apache commons-collections library permitted code execution when deserializing objects involving a specially constructed chain of classes. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using the commons-collections library.</p> https://cve.radiocsirt.org/vuln/ghsa-fjq5-5j5f-mvxh https://cve.radiocsirt.org/vuln/gsd-2015-7501 gsd-2015-7501 https://cve.radiocsirt.org/vuln/gsd-2015-7501 https://cve.radiocsirt.org/vuln/rhsa-2015:2500 <p>apache-commons-collections: InvokerTransformer code execution during deserialisation</p> <p>apache-commons-collections: InvokerTransformer code execution during deserialisation</p> https://cve.radiocsirt.org/vuln/rhsa-2015:2500 https://cve.radiocsirt.org/vuln/rhsa-2015:2522 <p>apache-commons-collections: InvokerTransformer code execution during deserialisation</p> <p>apache-commons-collections: InvokerTransformer code execution during deserialisation</p> https://cve.radiocsirt.org/vuln/rhsa-2015:2522 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-7501 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libcommons-collections3-java, Ubuntu:16.04:LTS: libcommons-collections3-java, Ubuntu:16.04:LTS: libcommons-collections4-java, Ubuntu:18.04:LTS: libcommons-collections4-java, Ubuntu:20.04:LTS: libcommons-collections4-java, Ubuntu:22.04:LTS: libcommons-collections4-java, Ubuntu:24.04:LTS: libcommons-collections4-java, Ubuntu:25.10: libcommons-collections4-java, Ubuntu:26.04:LTS: libcommons-collections4-java</p> <p>Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libcommons-collections3-java, Ubuntu:16.04:LTS: libcommons-collections3-java, Ubuntu:16.04:LTS: libcommons-collections4-java, Ubuntu:18.04:LTS: libcommons-collections4-java, Ubuntu:20.04:LTS: libcommons-collections4-java, Ubuntu:22.04:LTS: libcommons-collections4-java, Ubuntu:24.04:LTS: libcommons-collections4-java, Ubuntu:25.10: libcommons-collections4-java, Ubuntu:26.04:LTS: libcommons-collections4-java</p> <p>Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-7501 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1738 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1738