https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:58:03 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0556 certfr-2026-avi-0556 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0556 https://cve.radiocsirt.org/vuln/cnvd-2018-09566 cnvd-2018-09566 https://cve.radiocsirt.org/vuln/cnvd-2018-09566 https://cve.radiocsirt.org/vuln/euvd-2026-176609 EUVD-2026-176609 https://cve.radiocsirt.org/vuln/euvd-2026-176609 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15691 <p>In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.</p> <p>In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-15691 https://cve.radiocsirt.org/vuln/ghsa-wp2f-hrg2-3r5m <p><strong>Affected:</strong> Maven: org.apache.uima:uimafit-core, Maven: org.apache.uima:uimaj-core, Maven: org.apache.uima:uimaj-as-core</p> <p>In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.</p> <p><strong>Affected:</strong> Maven: org.apache.uima:uimafit-core, Maven: org.apache.uima:uimaj-core, Maven: org.apache.uima:uimaj-as-core</p> <p>In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.</p> https://cve.radiocsirt.org/vuln/ghsa-wp2f-hrg2-3r5m https://cve.radiocsirt.org/vuln/gsd-2017-15691 gsd-2017-15691 https://cve.radiocsirt.org/vuln/gsd-2017-15691 https://cve.radiocsirt.org/vuln/rhsa-2019:1545 <p>bsh2: remote code execution via deserialization log4j: Socket receiver deserialization vulnerability uima: XML external entity expansion (XXE) can allow attackers to execute arbitrary code mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018) thrift: Improper Access Control grants access to files outside the webservers docroot path log4j: deserialization of untrusted data in SocketServer</p> <p>bsh2: remote code execution via deserialization log4j: Socket receiver deserialization vulnerability uima: XML external entity expansion (XXE) can allow attackers to execute arbitrary code mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018) thrift: Improper Access Control grants access to files outside the webservers docroot path log4j: deserialization of untrusted data in SocketServer</p> https://cve.radiocsirt.org/vuln/rhsa-2019:1545 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15691 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: uimaj, Ubuntu:18.04:LTS: uimaj</p> <p>In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: uimaj, Ubuntu:18.04:LTS: uimaj</p> <p>In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15691 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3531 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM FileNet Content Manager ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM FileNet Content Manager ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3531