https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:48:22 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-03809 bdu:2019-03809 https://cve.radiocsirt.org/vuln/bdu:2019-03809 https://cve.radiocsirt.org/vuln/certfr-2022-avi-570 certfr-2022-avi-570 https://cve.radiocsirt.org/vuln/certfr-2022-avi-570 https://cve.radiocsirt.org/vuln/cleanstart-2026-ku61465 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: stargate</p> <p>Multiple security vulnerabilities affect the stargate package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: stargate</p> <p>Multiple security vulnerabilities affect the stargate package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ku61465 https://cve.radiocsirt.org/vuln/cnvd-2019-00640 cnvd-2019-00640 https://cve.radiocsirt.org/vuln/cnvd-2019-00640 https://cve.radiocsirt.org/vuln/euvd-2026-61122 EUVD-2026-61122 https://cve.radiocsirt.org/vuln/euvd-2026-61122 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1320 <p>Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.</p> <p>Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1320 https://cve.radiocsirt.org/vuln/ghsa-wjxj-f8rg-99wx <p><strong>Affected:</strong> Maven: org.apache.thrift:libthrift</p> <p>Apache Thrift Java client library versions 0.5.0 prior to 0.9.3-1 and 0.10.0 prior to 0.12.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.</p> <p><strong>Affected:</strong> Maven: org.apache.thrift:libthrift</p> <p>Apache Thrift Java client library versions 0.5.0 prior to 0.9.3-1 and 0.10.0 prior to 0.12.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.</p> https://cve.radiocsirt.org/vuln/ghsa-wjxj-f8rg-99wx https://cve.radiocsirt.org/vuln/gsd-2018-1320 gsd-2018-1320 https://cve.radiocsirt.org/vuln/gsd-2018-1320 https://cve.radiocsirt.org/vuln/rhsa-2019:2413 <p>hazelcast: java deserialization in join cluster procedure leading to remote code execution spring-security-core: Unauthorized Access with Spring Security Method Security thrift: SASL negotiation isComplete validation bypass in the org.apache.thrift.transport.TSaslTransport class slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution jolokia: system-wide CSRF that could lead to Remote Code Execution spring-security-oauth: Privilege escalation by manipulating saved authorization request solr: remote code execution due to unsafe deserialization wildfly: Race condition on PID file allows for termination of arbitrary processes by local users</p> <p>hazelcast: java deserialization in join cluster procedure leading to remote code execution spring-security-core: Unauthorized Access with Spring Security Method Security thrift: SASL negotiation isComplete validation bypass in the org.apache.thrift.transport.TSaslTransport class slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution jolokia: system-wide CSRF that could lead to Remote Code Execution spring-security-oauth: Privilege escalation by manipulating saved authorization request solr: remote code execution due to unsafe deserialization wildfly: Race condition on PID file allows for termination of arbitrary processes by local users</p> https://cve.radiocsirt.org/vuln/rhsa-2019:2413 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1320 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libthrift-java, Ubuntu:18.04:LTS: libthrift-java</p> <p>Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libthrift-java, Ubuntu:18.04:LTS: libthrift-java</p> <p>Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1320 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0723 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Integration Bus ausnutzen, um Sicherheitsvorkehrungen zu umgehen und einen Denial of Service Zustand herzustellen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Integration Bus ausnutzen, um Sicherheitsvorkehrungen zu umgehen und einen Denial of Service Zustand herzustellen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0723