https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:36:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05424 bdu:2023-05424 https://cve.radiocsirt.org/vuln/bdu:2023-05424 https://cve.radiocsirt.org/vuln/certfr-2022-avi-056 certfr-2022-avi-056 https://cve.radiocsirt.org/vuln/certfr-2022-avi-056 https://cve.radiocsirt.org/vuln/euvd-2026-246432 EUVD-2026-246432 https://cve.radiocsirt.org/vuln/euvd-2026-246432 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10219 <p>A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.</p> <p>A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10219 https://cve.radiocsirt.org/vuln/ghsa-m8p2-495h-ccmh <p><strong>Affected:</strong> Maven: org.hibernate.validator:hibernate-validator, Maven: org.hibernate:hibernate-validator</p> <p>A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.</p> <p><strong>Affected:</strong> Maven: org.hibernate.validator:hibernate-validator, Maven: org.hibernate:hibernate-validator</p> <p>A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.</p> https://cve.radiocsirt.org/vuln/ghsa-m8p2-495h-ccmh https://cve.radiocsirt.org/vuln/gsd-2019-10219 gsd-2019-10219 https://cve.radiocsirt.org/vuln/gsd-2019-10219 https://cve.radiocsirt.org/vuln/oesa-2021-1332 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: hibernate-validator, openEuler:20.03-LTS-SP2: hibernate-validator</p> <p>This is the reference implementation of JSR-349 - Bean Validation 1.1. Bean Validation defines a meta-data model and API for JavaBean as well as method validation. The default meta-data source are annotations, with the ability to override and extend the meta-data through the use of XML validation descriptors. Security Fix(es): A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.(CVE-2019-10219)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: hibernate-validator, openEuler:20.03-LTS-SP2: hibernate-validator</p> <p>This is the reference implementation of JSR-349 - Bean Validation 1.1. Bean Validation defines a meta-data model and API for JavaBean as well as method validation. The default meta-data source are annotations, with the ability to override and extend the meta-data through the use of XML validation descriptors. Security Fix(es): A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.(CVE-2019-10219)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1332 https://cve.radiocsirt.org/vuln/rhsa-2020:0159 <p>hibernate-validator: safeHTML validator allows XSS jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig EAP: Vault system property security attribute value is revealed on CLI &#39;reload&#39; command undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS jackson-databind: Serialization gadgets in classes of the commons-configuration package jackson-databind: Serialization gadgets in classes of the xalan package jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource jackson-databind: Serialization gadgets in classes of the ehcache package jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*</p> <p>hibernate-validator: safeHTML validator allows XSS jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig EAP: Vault system property security attribute value is revealed on CLI &#39;reload&#39; command undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS jackson-databind: Serialization gadgets in classes of the commons-configuration package jackson-databind: Serialization gadgets in classes of the xalan package jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource jackson-databind: Serialization gadgets in classes of the ehcache package jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*</p> https://cve.radiocsirt.org/vuln/rhsa-2020:0159 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10219 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libhibernate-validator-java, Ubuntu:18.04:LTS: libhibernate-validator-java, Ubuntu:20.04:LTS: libhibernate-validator-java, Ubuntu:22.04:LTS: libhibernate-validator-java, Ubuntu:24.04:LTS: libhibernate-validator-java, Ubuntu:25.10: libhibernate-validator-java, Ubuntu:26.04:LTS: libhibernate-validator-java</p> <p>A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libhibernate-validator-java, Ubuntu:18.04:LTS: libhibernate-validator-java, Ubuntu:20.04:LTS: libhibernate-validator-java, Ubuntu:22.04:LTS: libhibernate-validator-java, Ubuntu:24.04:LTS: libhibernate-validator-java, Ubuntu:25.10: libhibernate-validator-java, Ubuntu:26.04:LTS: libhibernate-validator-java</p> <p>A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10219 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375