Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 17:57:20 +0000 cnvd-2018-12677 https://cve.radiocsirt.org/vuln/cnvd-2018-12677 cnvd-2018-12677 https://cve.radiocsirt.org/vuln/cnvd-2018-12677 EUVD-2026-173798 https://cve.radiocsirt.org/vuln/euvd-2026-173798 EUVD-2026-173798 https://cve.radiocsirt.org/vuln/euvd-2026-173798 fkie_cve-2018-8038 https://cve.radiocsirt.org/vuln/fkie_cve-2018-8038 <p>Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity Provider response in the application plugins, or in the Identity Provider itself when parsing certain XML-based parameters.</p> <p>Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity Provider response in the application plugins, or in the Identity Provider itself when parsing certain XML-based parameters.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-8038 GHSA-w3gh-g32m-cvhr — High severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, org.apac… https://cve.radiocsirt.org/vuln/ghsa-w3gh-g32m-cvhr <p><strong>Affected:</strong> Maven: org.apache.cxf.fediz:fediz-spring, Maven: org.apache.cxf.fediz:fediz-spring2, Maven: org.apache.cxf.fediz:fediz-spring3, Maven: org.apache.cxf.fediz:fediz-jetty8, Maven: org.apache.cxf.fediz:fediz-jetty9</p> <p>Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity Provider response in the application plugins, or in the Identity Provider itself when parsing certain XML-based parameters.</p> <p><strong>Affected:</strong> Maven: org.apache.cxf.fediz:fediz-spring, Maven: org.apache.cxf.fediz:fediz-spring2, Maven: org.apache.cxf.fediz:fediz-spring3, Maven: org.apache.cxf.fediz:fediz-jetty8, Maven: org.apache.cxf.fediz:fediz-jetty9</p> <p>Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity Provider response in the application plugins, or in the Identity Provider itself when parsing certain XML-based parameters.</p> https://cve.radiocsirt.org/vuln/ghsa-w3gh-g32m-cvhr gsd-2018-8038 https://cve.radiocsirt.org/vuln/gsd-2018-8038 gsd-2018-8038 https://cve.radiocsirt.org/vuln/gsd-2018-8038