https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:10:12 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-34990 cnvd-2020-34990 https://cve.radiocsirt.org/vuln/cnvd-2020-34990 https://cve.radiocsirt.org/vuln/euvd-2026-256240 EUVD-2026-256240 https://cve.radiocsirt.org/vuln/euvd-2026-256240 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10068 <p>An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication and proceed to deserialize user-controlled .NET object input. This deserialization then led to unauthenticated remote code execution on the server where the Kentico instance was hosted.</p> <p>An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication and proceed to deserialize user-controlled .NET object input. This deserialization then led to unauthenticated remote code execution on the server where the Kentico instance was hosted.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10068 https://cve.radiocsirt.org/vuln/ghsa-f7w4-79f7-fhp3 <p>An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication and proceed to deserialize user-controlled .NET object input. This deserialization then led to unauthenticated remote code execution on the server where the Kentico instance was hosted.</p> <p>An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication and proceed to deserialize user-controlled .NET object input. This deserialization then led to unauthenticated remote code execution on the server where the Kentico instance was hosted.</p> https://cve.radiocsirt.org/vuln/ghsa-f7w4-79f7-fhp3 https://cve.radiocsirt.org/vuln/gsd-2019-10068 gsd-2019-10068 https://cve.radiocsirt.org/vuln/gsd-2019-10068