https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:49:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-03317 bdu:2020-03317 https://cve.radiocsirt.org/vuln/bdu:2020-03317 https://cve.radiocsirt.org/vuln/certfr-2019-avi-086 certfr-2019-avi-086 https://cve.radiocsirt.org/vuln/certfr-2019-avi-086 https://cve.radiocsirt.org/vuln/cleanstart-2026-cu18187 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: stargate</p> <p>Package stargate version 1.0.90-r4 fixes 87 vulnerabilities: ghsa-76h9-2vwh-w278, ghsa-pqr6-cmr2-h8hf, ghsa-fjpj-2g6w-x25r, ghsa-qcwq-55hx-v3vh, ghsa-55g7-9cwv-5qfv...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: stargate</p> <p>Package stargate version 1.0.90-r4 fixes 87 vulnerabilities: ghsa-76h9-2vwh-w278, ghsa-pqr6-cmr2-h8hf, ghsa-fjpj-2g6w-x25r, ghsa-qcwq-55hx-v3vh, ghsa-55g7-9cwv-5qfv...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-cu18187 https://cve.radiocsirt.org/vuln/cnvd-2018-10064 cnvd-2018-10064 https://cve.radiocsirt.org/vuln/cnvd-2018-10064 https://cve.radiocsirt.org/vuln/euvd-2026-64565 EUVD-2026-64565 https://cve.radiocsirt.org/vuln/euvd-2026-64565 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10237 <p>Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.</p> <p>Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10237 https://cve.radiocsirt.org/vuln/ghsa-mvr2-9pj6-7w5j <p><strong>Affected:</strong> Maven: com.google.guava:guava, Maven: com.google.guava:guava-jdk5, Maven: com.googlecode.guava-osgi:guava-osgi, Maven: de.mhus.ports:vaadin-shared-deps, Maven: org.hudsonci.lib.guava:guava, Maven: org.sonatype.sisu:sisu-guava</p> <p>Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.</p> <p><strong>Affected:</strong> Maven: com.google.guava:guava, Maven: com.google.guava:guava-jdk5, Maven: com.googlecode.guava-osgi:guava-osgi, Maven: de.mhus.ports:vaadin-shared-deps, Maven: org.hudsonci.lib.guava:guava, Maven: org.sonatype.sisu:sisu-guava</p> <p>Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.</p> https://cve.radiocsirt.org/vuln/ghsa-mvr2-9pj6-7w5j https://cve.radiocsirt.org/vuln/gsd-2018-10237 gsd-2018-10237 https://cve.radiocsirt.org/vuln/gsd-2018-10237 https://cve.radiocsirt.org/vuln/rhsa-2018:2423 <p>cxf: Improper size validation in message attachment header for JAX-WS and JAX-RS services apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.* guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) bouncycastle: flaw in the low-level interface to RSA key pair generator</p> <p>cxf: Improper size validation in message attachment header for JAX-WS and JAX-RS services apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.* guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) bouncycastle: flaw in the low-level interface to RSA key pair generator</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2423 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10237 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: guava-libraries, Ubuntu:16.04:LTS: guava-libraries, Ubuntu:18.04:LTS: guava-libraries, Ubuntu:20.04:LTS: guava-libraries</p> <p>Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: guava-libraries, Ubuntu:16.04:LTS: guava-libraries, Ubuntu:18.04:LTS: guava-libraries, Ubuntu:20.04:LTS: guava-libraries</p> <p>Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10237 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770