https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:38:55 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-33551 cnvd-2017-33551 https://cve.radiocsirt.org/vuln/cnvd-2017-33551 https://cve.radiocsirt.org/vuln/euvd-2026-75085 EUVD-2026-75085 https://cve.radiocsirt.org/vuln/euvd-2026-75085 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7957 <p>XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type &#39;void&#39; during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML(&#34;&lt;void/&gt;&#34;) call.</p> <p>XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type &#39;void&#39; during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML(&#34;&lt;void/&gt;&#34;) call.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-7957 https://cve.radiocsirt.org/vuln/ghsa-7hwc-46rm-65jh <p><strong>Affected:</strong> Maven: com.thoughtworks.xstream:xstream</p> <p>XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type &#39;void&#39; during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML(&#34;&lt;void/&gt;&#34;) call.</p> <p><strong>Affected:</strong> Maven: com.thoughtworks.xstream:xstream</p> <p>XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type &#39;void&#39; during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML(&#34;&lt;void/&gt;&#34;) call.</p> https://cve.radiocsirt.org/vuln/ghsa-7hwc-46rm-65jh https://cve.radiocsirt.org/vuln/gsd-2017-7957 gsd-2017-7957 https://cve.radiocsirt.org/vuln/gsd-2017-7957 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10592-1 <p>xstream-1.4.18-1.1 on GA media</p> <p>xstream-1.4.18-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10592-1 https://cve.radiocsirt.org/vuln/rhsa-2017:1832 <p>bouncycastle: Information disclosure in GCMBlockCipher camel-jacksonxml: Unmarshalling operation are vulnerable to RCE Security: Improper handling of path parameters allows bypassing the security constraint hawtio: Proxy is sharing cookies among all the clients hawtio: information Disclosure flaws due to unsafe path traversal cxf: CXF OAuth2 Hawk and JOSE MAC Validation code are vulnerable to timing attacks camel-core: Validation component vulnerable to SSRF via remote DTDs and XXE cxf: CXF JAX-RS XML Security streaming clients do not validate that the service response was signed or encrypted cxf: CXF&#39;s STSClient uses a flawed way of caching tokens that are associated with delegation tokens logback: Serialization vulnerability in SocketServer and ServerSocketReceiver XStream: DoS when unmarshalling void type</p> <p>bouncycastle: Information disclosure in GCMBlockCipher camel-jacksonxml: Unmarshalling operation are vulnerable to RCE Security: Improper handling of path parameters allows bypassing the security constraint hawtio: Proxy is sharing cookies among all the clients hawtio: information Disclosure flaws due to unsafe path traversal cxf: CXF OAuth2 Hawk and JOSE MAC Validation code are vulnerable to timing attacks camel-core: Validation component vulnerable to SSRF via remote DTDs and XXE cxf: CXF JAX-RS XML Security streaming clients do not validate that the service response was signed or encrypted cxf: CXF&#39;s STSClient uses a flawed way of caching tokens that are associated with delegation tokens logback: Serialization vulnerability in SocketServer and ServerSocketReceiver XStream: DoS when unmarshalling void type</p> https://cve.radiocsirt.org/vuln/rhsa-2017:1832 https://cve.radiocsirt.org/vuln/suse-ru-2019:1006-1 <p>Security update for SUSE Manager Server 3.2</p> <p>Security update for SUSE Manager Server 3.2</p> https://cve.radiocsirt.org/vuln/suse-ru-2019:1006-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7957 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libxstream-java, Ubuntu:16.04:LTS: libxstream-java</p> <p>XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type &#39;void&#39; during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML(&#34;&lt;void/&gt;&#34;) call.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libxstream-java, Ubuntu:16.04:LTS: libxstream-java</p> <p>XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type &#39;void&#39; during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML(&#34;&lt;void/&gt;&#34;) call.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7957 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375