https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:15:03 +0000 https://cve.radiocsirt.org/vuln/certfr-2017-avi-370 certfr-2017-avi-370 https://cve.radiocsirt.org/vuln/certfr-2017-avi-370 https://cve.radiocsirt.org/vuln/cnvd-2017-00746 cnvd-2017-00746 https://cve.radiocsirt.org/vuln/cnvd-2017-00746 https://cve.radiocsirt.org/vuln/euvd-2026-172615 EUVD-2026-172615 https://cve.radiocsirt.org/vuln/euvd-2026-172615 https://cve.radiocsirt.org/vuln/fkie_cve-2016-6814 <p>When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization mechanisms, e.g. to communicate between servers or to store local data, it was possible for an attacker to bake a special serialized object that will execute code directly when deserialized. All applications which rely on serialization and do not isolate the code which deserializes objects were subject to this vulnerability.</p> <p>When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization mechanisms, e.g. to communicate between servers or to store local data, it was possible for an attacker to bake a special serialized object that will execute code directly when deserialized. All applications which rely on serialization and do not isolate the code which deserializes objects were subject to this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-6814 https://cve.radiocsirt.org/vuln/ghsa-xphj-m9cc-8fmq <p><strong>Affected:</strong> Maven: org.codehaus.groovy:groovy, Maven: org.codehaus.groovy:groovy-all</p> <p>When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization mechanisms, e.g. to communicate between servers or to store local data, it was possible for an attacker to bake a special serialized object that will execute code directly when deserialized. All applications which rely on serialization and do not isolate the code which deserializes objects were subject to this vulnerability.</p> <p><strong>Affected:</strong> Maven: org.codehaus.groovy:groovy, Maven: org.codehaus.groovy:groovy-all</p> <p>When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization mechanisms, e.g. to communicate between servers or to store local data, it was possible for an attacker to bake a special serialized object that will execute code directly when deserialized. All applications which rely on serialization and do not isolate the code which deserializes objects were subject to this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-xphj-m9cc-8fmq https://cve.radiocsirt.org/vuln/gsd-2016-6814 gsd-2016-6814 https://cve.radiocsirt.org/vuln/gsd-2016-6814 https://cve.radiocsirt.org/vuln/rhsa-2017:0272 <p>pdfbox: XML External Entity vulnerability tika: XML External Entity vulnerability Groovy: Remote code execution via deserialization</p> <p>pdfbox: XML External Entity vulnerability tika: XML External Entity vulnerability Groovy: Remote code execution via deserialization</p> https://cve.radiocsirt.org/vuln/rhsa-2017:0272 https://cve.radiocsirt.org/vuln/rhsa-2017:2486 <p>groovy: remote execution of untrusted code in class MethodClosure Groovy: Remote code execution via deserialization</p> <p>groovy: remote execution of untrusted code in class MethodClosure Groovy: Remote code execution via deserialization</p> https://cve.radiocsirt.org/vuln/rhsa-2017:2486 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-6814 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: groovy2, Ubuntu:16.04:LTS: groovy</p> <p>When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization mechanisms, e.g. to communicate between servers or to store local data, it was possible for an attacker to bake a special serialized object that will execute code directly when deserialized. All applications which rely on serialization and do not isolate the code which deserializes objects were subject to this vulnerability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: groovy2, Ubuntu:16.04:LTS: groovy</p> <p>When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization mechanisms, e.g. to communicate between servers or to store local data, it was possible for an attacker to bake a special serialized object that will execute code directly when deserialized. All applications which rely on serialization and do not isolate the code which deserializes objects were subject to this vulnerability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-6814