https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:00:50 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-03869 cnvd-2016-03869 https://cve.radiocsirt.org/vuln/cnvd-2016-03869 https://cve.radiocsirt.org/vuln/euvd-2026-256387 EUVD-2026-256387 https://cve.radiocsirt.org/vuln/euvd-2026-256387 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4437 <p>Apache Shiro before 1.2.5, when a cipher key has not been configured for the &#34;remember me&#34; feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.</p> <p>Apache Shiro before 1.2.5, when a cipher key has not been configured for the &#34;remember me&#34; feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-4437 https://cve.radiocsirt.org/vuln/ghsa-p836-389h-j692 <p><strong>Affected:</strong> Maven: org.apache.shiro:shiro-core</p> <p>Apache Shiro before 1.2.5, when a cipher key has not been configured for the &#34;remember me&#34; feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.</p> <p><strong>Affected:</strong> Maven: org.apache.shiro:shiro-core</p> <p>Apache Shiro before 1.2.5, when a cipher key has not been configured for the &#34;remember me&#34; feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-p836-389h-j692 https://cve.radiocsirt.org/vuln/gsd-2016-4437 gsd-2016-4437 https://cve.radiocsirt.org/vuln/gsd-2016-4437 https://cve.radiocsirt.org/vuln/rhsa-2016:2035 <p>Framework: denial-of-service attack with XML input ObjectMessage: unsafe deserialization camel-xstream: Java object de-serialization vulnerability leads to RCE Camel: Java object deserialisation in Jetty/Servlet bouncycastle: Invalid curve attack allowing to extract private keys JGroups: Authorization bypass bsh2: remote code execution via deserialization shiro: Security constraint bypass</p> <p>Framework: denial-of-service attack with XML input ObjectMessage: unsafe deserialization camel-xstream: Java object de-serialization vulnerability leads to RCE Camel: Java object deserialisation in Jetty/Servlet bouncycastle: Invalid curve attack allowing to extract private keys JGroups: Authorization bypass bsh2: remote code execution via deserialization shiro: Security constraint bypass</p> https://cve.radiocsirt.org/vuln/rhsa-2016:2035 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4437 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: shiro</p> <p>Apache Shiro before 1.2.5, when a cipher key has not been configured for the &#34;remember me&#34; feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: shiro</p> <p>Apache Shiro before 1.2.5, when a cipher key has not been configured for the &#34;remember me&#34; feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4437 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3616 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Fuse und Red Hat JBoss A-MQ ausnutzen, um einen Denial of Service Angriff durchzuführen, Code mit den Privilegien des angegriffenen Dienstes zur Ausführung bringen, vertrauliche Daten einzusehen, Informationen zu manipulieren oder Sicherheitsmechanismen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Fuse und Red Hat JBoss A-MQ ausnutzen, um einen Denial of Service Angriff durchzuführen, Code mit den Privilegien des angegriffenen Dienstes zur Ausführung bringen, vertrauliche Daten einzusehen, Informationen zu manipulieren oder Sicherheitsmechanismen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3616