https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:25:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01453 bdu:2021-01453 https://cve.radiocsirt.org/vuln/bdu:2021-01453 https://cve.radiocsirt.org/vuln/certfr-2018-avi-544 certfr-2018-avi-544 https://cve.radiocsirt.org/vuln/certfr-2018-avi-544 https://cve.radiocsirt.org/vuln/cnvd-2018-16945 cnvd-2018-16945 https://cve.radiocsirt.org/vuln/cnvd-2018-16945 https://cve.radiocsirt.org/vuln/euvd-2026-173490 EUVD-2026-173490 https://cve.radiocsirt.org/vuln/euvd-2026-173490 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11771 <p>When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17&#39;s ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamReader this can lead to an infinite stream, which can be used to mount a denial of service attack against services that use Compress&#39; zip package.</p> <p>When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17&#39;s ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamReader this can lead to an infinite stream, which can be used to mount a denial of service attack against services that use Compress&#39; zip package.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-11771 https://cve.radiocsirt.org/vuln/ghsa-hrmr-f5m6-m9pq <p><strong>Affected:</strong> Maven: org.apache.commons:commons-compress</p> <p>When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17&#39;s ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamReader this can lead to an infinite stream, which can be used to mount a denial of service attack against services that use Compress&#39; zip package.</p> <p><strong>Affected:</strong> Maven: org.apache.commons:commons-compress</p> <p>When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17&#39;s ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamReader this can lead to an infinite stream, which can be used to mount a denial of service attack against services that use Compress&#39; zip package.</p> https://cve.radiocsirt.org/vuln/ghsa-hrmr-f5m6-m9pq https://cve.radiocsirt.org/vuln/gsd-2018-11771 gsd-2018-11771 https://cve.radiocsirt.org/vuln/gsd-2018-11771 https://cve.radiocsirt.org/vuln/rhsa-2020:0983 <p>jquery: Cross-site scripting via cross-domain ajax requests logback: Serialization vulnerability in SocketServer and ServerSocketReceiver js-jquery: XSS in responses from cross-origin ajax requests apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip jetty: full server path revealed when using the default Error Handling springframework: DoS Attack via Range Requests spring-data-api: potential information disclosure through maliciously crafted example value in ExampleMatcher undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed c3p0: loading XML configuration leads to denial of service HTTP/2: flood using PING frames results in unbounded memory growth HTTP/2: flood using PRIORITY frames results in excessive resource consumption HTTP/2: flood using HEADERS frames results in unbounded memory growth HTTP/2: flood using SETTINGS frames results in unbounded memory growth HTTP/2: 0-length headers lead to denial of service HTTP/2: request for large response leads to denial of service HTTP/2: flood using empty frames results in excessive resource consumption infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods undertow: Information leak in requests for directories without trailing slashes jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions jetty: error path information disclosure spring-secur…</p> <p>jquery: Cross-site scripting via cross-domain ajax requests logback: Serialization vulnerability in SocketServer and ServerSocketReceiver js-jquery: XSS in responses from cross-origin ajax requests apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip jetty: full server path revealed when using the default Error Handling springframework: DoS Attack via Range Requests spring-data-api: potential information disclosure through maliciously crafted example value in ExampleMatcher undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed c3p0: loading XML configuration leads to denial of service HTTP/2: flood using PING frames results in unbounded memory growth HTTP/2: flood using PRIORITY frames results in excessive resource consumption HTTP/2: flood using HEADERS frames results in unbounded memory growth HTTP/2: flood using SETTINGS frames results in unbounded memory growth HTTP/2: 0-length headers lead to denial of service HTTP/2: request for large response leads to denial of service HTTP/2: flood using empty frames results in excessive resource consumption infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods undertow: Information leak in requests for directories without trailing slashes jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions jetty: error path information disclosure spring-secur…</p> https://cve.radiocsirt.org/vuln/rhsa-2020:0983 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11771 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libcommons-compress-java, Ubuntu:18.04:LTS: libcommons-compress-java</p> <p>When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17&#39;s ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamReader this can lead to an infinite stream, which can be used to mount a denial of service attack against services that use Compress&#39; zip package.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libcommons-compress-java, Ubuntu:18.04:LTS: libcommons-compress-java</p> <p>When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17&#39;s ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamReader this can lead to an infinite stream, which can be used to mount a denial of service attack against services that use Compress&#39; zip package.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11771 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770