https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:46:47 +0000 https://cve.radiocsirt.org/vuln/certfr-2018-avi-144 certfr-2018-avi-144 https://cve.radiocsirt.org/vuln/certfr-2018-avi-144 https://cve.radiocsirt.org/vuln/cnvd-2018-03822 cnvd-2018-03822 https://cve.radiocsirt.org/vuln/cnvd-2018-03822 https://cve.radiocsirt.org/vuln/euvd-2026-60735 EUVD-2026-60735 https://cve.radiocsirt.org/vuln/euvd-2026-60735 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0489 <p>Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this issue exists because of an incomplete fix for CVE-2018-0486.</p> <p>Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this issue exists because of an incomplete fix for CVE-2018-0486.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-0489 https://cve.radiocsirt.org/vuln/ghsa-4479-q654-wmq5 <p>Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this issue exists because of an incomplete fix for CVE-2018-0486.</p> <p>Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this issue exists because of an incomplete fix for CVE-2018-0486.</p> https://cve.radiocsirt.org/vuln/ghsa-4479-q654-wmq5 https://cve.radiocsirt.org/vuln/gsd-2018-0489 gsd-2018-0489 https://cve.radiocsirt.org/vuln/gsd-2018-0489 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11523-1 <p>libxmltooling-devel-3.2.0-1.2 on GA media</p> <p>libxmltooling-devel-3.2.0-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11523-1 https://cve.radiocsirt.org/vuln/suse-su-2018:0720-1 <p>Security update for xmltooling</p> <p>Security update for xmltooling</p> https://cve.radiocsirt.org/vuln/suse-su-2018:0720-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-0489 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: xmltooling, Ubuntu:16.04:LTS: xmltooling</p> <p>Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this issue exists because of an incomplete fix for CVE-2018-0486.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: xmltooling, Ubuntu:16.04:LTS: xmltooling</p> <p>Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this issue exists because of an incomplete fix for CVE-2018-0486.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-0489