https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:06:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-08607 bdu:2025-08607 https://cve.radiocsirt.org/vuln/bdu:2025-08607 https://cve.radiocsirt.org/vuln/certfr-2022-avi-551 certfr-2022-avi-551 https://cve.radiocsirt.org/vuln/certfr-2022-avi-551 https://cve.radiocsirt.org/vuln/cnvd-2019-41852 cnvd-2019-41852 https://cve.radiocsirt.org/vuln/cnvd-2019-41852 https://cve.radiocsirt.org/vuln/euvd-2026-215906 EUVD-2026-215906 https://cve.radiocsirt.org/vuln/euvd-2026-215906 https://cve.radiocsirt.org/vuln/fkie_cve-2019-0231 <p>Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.</p> <p>Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-0231 https://cve.radiocsirt.org/vuln/ghsa-5h29-qq92-wj7f <p><strong>Affected:</strong> Maven: org.apache.mina:mina-core</p> <p>Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.</p> <p><strong>Affected:</strong> Maven: org.apache.mina:mina-core</p> <p>Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.</p> https://cve.radiocsirt.org/vuln/ghsa-5h29-qq92-wj7f https://cve.radiocsirt.org/vuln/gsd-2019-0231 gsd-2019-0231 https://cve.radiocsirt.org/vuln/gsd-2019-0231 https://cve.radiocsirt.org/vuln/rhsa-2020:0895 <p>mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure. elasticsearch: Improper permission issue when attaching a new name to an index jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig jackson-databind: Serialization gadgets in classes of the commons-configuration package jackson-databind: Serialization gadgets in classes of the xalan package jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource jackson-databind: Serialization gadgets in classes of the ehcache package jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*</p> <p>mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure. elasticsearch: Improper permission issue when attaching a new name to an index jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig jackson-databind: Serialization gadgets in classes of the commons-configuration package jackson-databind: Serialization gadgets in classes of the xalan package jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource jackson-databind: Serialization gadgets in classes of the ehcache package jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*</p> https://cve.radiocsirt.org/vuln/rhsa-2020:0895 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-0231 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mina, Ubuntu:16.04:LTS: mina2, Ubuntu:18.04:LTS: mina, Ubuntu:18.04:LTS: mina2, Ubuntu:20.04:LTS: mina, Ubuntu:20.04:LTS: mina2, Ubuntu:22.04:LTS: mina, Ubuntu:24.04:LTS: mina</p> <p>Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mina, Ubuntu:16.04:LTS: mina2, Ubuntu:18.04:LTS: mina, Ubuntu:18.04:LTS: mina2, Ubuntu:20.04:LTS: mina, Ubuntu:20.04:LTS: mina2, Ubuntu:22.04:LTS: mina, Ubuntu:24.04:LTS: mina</p> <p>Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-0231 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0899 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0899