https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:58:05 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-20868 cnvd-2018-20868 https://cve.radiocsirt.org/vuln/cnvd-2018-20868 https://cve.radiocsirt.org/vuln/euvd-2026-170604 EUVD-2026-170604 https://cve.radiocsirt.org/vuln/euvd-2026-170604 https://cve.radiocsirt.org/vuln/fkie_cve-2018-18240 <p>Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream&#39;s available protection mechanisms to restrict unmarshalling.</p> <p>Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream&#39;s available protection mechanisms to restrict unmarshalling.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-18240 https://cve.radiocsirt.org/vuln/ghsa-h892-x453-86wc <p><strong>Affected:</strong> Maven: ro.pippo:pippo-core, Maven: ro.pippo:pippo-session</p> <p>Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream&#39;s available protection mechanisms to restrict unmarshalling.</p> <p><strong>Affected:</strong> Maven: ro.pippo:pippo-core, Maven: ro.pippo:pippo-session</p> <p>Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream&#39;s available protection mechanisms to restrict unmarshalling.</p> https://cve.radiocsirt.org/vuln/ghsa-h892-x453-86wc https://cve.radiocsirt.org/vuln/gsd-2018-18240 gsd-2018-18240 https://cve.radiocsirt.org/vuln/gsd-2018-18240