https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:34:39 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:9318 <p><strong>Affected:</strong> AlmaLinux:8: ant, AlmaLinux:8: ant-antlr, AlmaLinux:8: ant-apache-bcel, AlmaLinux:8: ant-apache-bsf, AlmaLinux:8: ant-apache-log4j, AlmaLinux:8: ant-apache-oro, AlmaLinux:8: ant-apache-regexp, AlmaLinux:8: ant-apache-resolver, AlmaLinux:8: ant-apache-xalan2, AlmaLinux:8: ant-commons-logging and 500 more</p> <p>The javapackages-tools packages provide macros and scripts to support Java packaging.</p> <p>Security Fix(es):</p> <p>* apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default (CVE-2019-10086) * commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum&#39;s declaredClass property by default (CVE-2025-48734)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: ant, AlmaLinux:8: ant-antlr, AlmaLinux:8: ant-apache-bcel, AlmaLinux:8: ant-apache-bsf, AlmaLinux:8: ant-apache-log4j, AlmaLinux:8: ant-apache-oro, AlmaLinux:8: ant-apache-regexp, AlmaLinux:8: ant-apache-resolver, AlmaLinux:8: ant-apache-xalan2, AlmaLinux:8: ant-commons-logging and 500 more</p> <p>The javapackages-tools packages provide macros and scripts to support Java packaging.</p> <p>Security Fix(es):</p> <p>* apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default (CVE-2019-10086) * commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum&#39;s declaredClass property by default (CVE-2025-48734)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:9318 https://cve.radiocsirt.org/vuln/bdu:2020-01020 bdu:2020-01020 https://cve.radiocsirt.org/vuln/bdu:2020-01020 https://cve.radiocsirt.org/vuln/certfr-2020-avi-433 certfr-2020-avi-433 https://cve.radiocsirt.org/vuln/certfr-2020-avi-433 https://cve.radiocsirt.org/vuln/cnvd-2019-42779 cnvd-2019-42779 https://cve.radiocsirt.org/vuln/cnvd-2019-42779 https://cve.radiocsirt.org/vuln/euvd-2026-53346 EUVD-2026-53346 https://cve.radiocsirt.org/vuln/euvd-2026-53346 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10086 <p>In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.</p> <p>In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10086 https://cve.radiocsirt.org/vuln/ghsa-6phf-73q6-gh87 <p><strong>Affected:</strong> Maven: commons-beanutils:commons-beanutils</p> <p>In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.</p> <p><strong>Affected:</strong> Maven: commons-beanutils:commons-beanutils</p> <p>In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.</p> https://cve.radiocsirt.org/vuln/ghsa-6phf-73q6-gh87 https://cve.radiocsirt.org/vuln/gsd-2019-10086 gsd-2019-10086 https://cve.radiocsirt.org/vuln/gsd-2019-10086 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2058-1 <p>Security update for apache-commons-beanutils</p> <p>Security update for apache-commons-beanutils</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:2058-1 https://cve.radiocsirt.org/vuln/rhba-2020:0496 <p>apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default</p> <p>apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default</p> https://cve.radiocsirt.org/vuln/rhba-2020:0496 https://cve.radiocsirt.org/vuln/suse-su-2019:2244-1 <p>Security update for apache-commons-beanutils</p> <p>Security update for apache-commons-beanutils</p> https://cve.radiocsirt.org/vuln/suse-su-2019:2244-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10086 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: commons-beanutils, Ubuntu:Pro:16.04:LTS: commons-beanutils, Ubuntu:Pro:18.04:LTS: commons-beanutils</p> <p>In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: commons-beanutils, Ubuntu:Pro:16.04:LTS: commons-beanutils, Ubuntu:Pro:18.04:LTS: commons-beanutils</p> <p>In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10086 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770