https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:49:38 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-02254 bdu:2020-02254 https://cve.radiocsirt.org/vuln/bdu:2020-02254 https://cve.radiocsirt.org/vuln/certfr-2021-avi-943 certfr-2021-avi-943 https://cve.radiocsirt.org/vuln/certfr-2021-avi-943 https://cve.radiocsirt.org/vuln/cnvd-2019-42444 cnvd-2019-42444 https://cve.radiocsirt.org/vuln/cnvd-2019-42444 https://cve.radiocsirt.org/vuln/euvd-2026-53396 EUVD-2026-53396 https://cve.radiocsirt.org/vuln/euvd-2026-53396 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10172 <p>A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.</p> <p>A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10172 https://cve.radiocsirt.org/vuln/ghsa-r6j9-8759-g62w <p><strong>Affected:</strong> Maven: org.codehaus.jackson:jackson-mapper-asl</p> <p>A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar to CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.</p> <p><strong>Affected:</strong> Maven: org.codehaus.jackson:jackson-mapper-asl</p> <p>A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar to CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.</p> https://cve.radiocsirt.org/vuln/ghsa-r6j9-8759-g62w https://cve.radiocsirt.org/vuln/gsd-2019-10172 gsd-2019-10172 https://cve.radiocsirt.org/vuln/gsd-2019-10172 https://cve.radiocsirt.org/vuln/oesa-2021-1342 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: jackson, openEuler:20.03-LTS-SP2: jackson</p> <p>JSON processor written in Java., it also offers full node-based Tree Model, as well as full Object/Json Mapper data binding functionality. Security Fix(es): A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.(CVE-2019-10172)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: jackson, openEuler:20.03-LTS-SP2: jackson</p> <p>JSON processor written in Java., it also offers full node-based Tree Model, as well as full Object/Json Mapper data binding functionality. Security Fix(es): A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.(CVE-2019-10172)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1342 https://cve.radiocsirt.org/vuln/rhsa-2020:2058 <p>jackson-mapper-asl: XML external entity similar to CVE-2016-3720 cxf: OpenId Connect token service does not properly validate the clientId cxf: reflected XSS in the services listing page Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader Soteria: security identity corruption across concurrent threads undertow: AJP File Read/Inclusion Vulnerability undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass cryptacular: excessive memory allocation during a decode operation undertow: Memory exhaustion issue in HttpReadListener via &#34;Expect: 100-continue&#34; header undertow: invalid HTTP request with large chunk size</p> <p>jackson-mapper-asl: XML external entity similar to CVE-2016-3720 cxf: OpenId Connect token service does not properly validate the clientId cxf: reflected XSS in the services listing page Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader Soteria: security identity corruption across concurrent threads undertow: AJP File Read/Inclusion Vulnerability undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass cryptacular: excessive memory allocation during a decode operation undertow: Memory exhaustion issue in HttpReadListener via &#34;Expect: 100-continue&#34; header undertow: invalid HTTP request with large chunk size</p> https://cve.radiocsirt.org/vuln/rhsa-2020:2058 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10172 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libjackson-json-java, Ubuntu:16.04:LTS: libjackson-json-java, Ubuntu:18.04:LTS: libjackson-json-java, Ubuntu:20.04:LTS: libjackson-json-java</p> <p>A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libjackson-json-java, Ubuntu:16.04:LTS: libjackson-json-java, Ubuntu:18.04:LTS: libjackson-json-java, Ubuntu:20.04:LTS: libjackson-json-java</p> <p>A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10172 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770