https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 20:57:26 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-01137 bdu:2016-01137 https://cve.radiocsirt.org/vuln/bdu:2016-01137 https://cve.radiocsirt.org/vuln/cnvd-2016-02662 cnvd-2016-02662 https://cve.radiocsirt.org/vuln/cnvd-2016-02662 https://cve.radiocsirt.org/vuln/euvd-2026-83397 EUVD-2026-83397 https://cve.radiocsirt.org/vuln/euvd-2026-83397 https://cve.radiocsirt.org/vuln/fkie_cve-2016-3082 <p>XSLTResult in Apache Struts 2.x before 2.3.20.2, 2.3.24.x before 2.3.24.2, and 2.3.28.x before 2.3.28.1 allows remote attackers to execute arbitrary code via the stylesheet location parameter.</p> <p>XSLTResult in Apache Struts 2.x before 2.3.20.2, 2.3.24.x before 2.3.24.2, and 2.3.28.x before 2.3.28.1 allows remote attackers to execute arbitrary code via the stylesheet location parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-3082 https://cve.radiocsirt.org/vuln/ghsa-pvm9-288c-v5wq <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>XSLTResult allows for the location of a stylesheet being passed as a request parameter. In some circumstances this can be used to inject remotely executable code.</p> <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>XSLTResult allows for the location of a stylesheet being passed as a request parameter. In some circumstances this can be used to inject remotely executable code.</p> https://cve.radiocsirt.org/vuln/ghsa-pvm9-288c-v5wq https://cve.radiocsirt.org/vuln/gsd-2016-3082 gsd-2016-3082 https://cve.radiocsirt.org/vuln/gsd-2016-3082