https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:25:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-02116 bdu:2020-02116 https://cve.radiocsirt.org/vuln/bdu:2020-02116 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0590 certfr-2024-avi-0590 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0590 https://cve.radiocsirt.org/vuln/euvd-2026-54992 EUVD-2026-54992 https://cve.radiocsirt.org/vuln/euvd-2026-54992 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12402 <p>The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.</p> <p>The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-12402 https://cve.radiocsirt.org/vuln/ghsa-53x6-4x5p-rrvv <p><strong>Affected:</strong> Maven: org.apache.commons:commons-compress, Maven: io.github.1tchy.java9modular.org.apache.commons:commons-compress</p> <p>The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.</p> <p><strong>Affected:</strong> Maven: org.apache.commons:commons-compress, Maven: io.github.1tchy.java9modular.org.apache.commons:commons-compress</p> <p>The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.</p> https://cve.radiocsirt.org/vuln/ghsa-53x6-4x5p-rrvv https://cve.radiocsirt.org/vuln/gsd-2019-12402 gsd-2019-12402 https://cve.radiocsirt.org/vuln/gsd-2019-12402 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10618-1 <p>apache-commons-compress-1.21-1.2 on GA media</p> <p>apache-commons-compress-1.21-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10618-1 https://cve.radiocsirt.org/vuln/rhsa-2021:3140 <p>log4j: Socket receiver deserialization vulnerability snakeyaml: Billion laughs attack via alias feature apache-commons-compress: Infinite loop in name encoding algorithm wildfly: The &#39;enabled-protocols&#39; value in legacy security is not respected if OpenSSL security provider is in use netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class olingo-odata: Server side request forgery in AsyncResponseWrapperImpl tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability spring-cloud-config-server: sending a request using a specially crafted URL can lead to a directory traversal attack springframework: RFD protection bypass via jsessionid Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371 tomcat: deserialization flaw in session persistence storage leading to RCE RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack hibernate-validator: Improper input validation in the interpolation of constraint error messages wildfly-elytron: session fixation when using FORM authentication undertow: invalid HTTP request with large chunk size tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS a…</p> <p>log4j: Socket receiver deserialization vulnerability snakeyaml: Billion laughs attack via alias feature apache-commons-compress: Infinite loop in name encoding algorithm wildfly: The &#39;enabled-protocols&#39; value in legacy security is not respected if OpenSSL security provider is in use netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class olingo-odata: Server side request forgery in AsyncResponseWrapperImpl tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability spring-cloud-config-server: sending a request using a specially crafted URL can lead to a directory traversal attack springframework: RFD protection bypass via jsessionid Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371 tomcat: deserialization flaw in session persistence storage leading to RCE RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack hibernate-validator: Improper input validation in the interpolation of constraint error messages wildfly-elytron: session fixation when using FORM authentication undertow: invalid HTTP request with large chunk size tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS a…</p> https://cve.radiocsirt.org/vuln/rhsa-2021:3140 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12402 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libcommons-compress-java</p> <p>The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libcommons-compress-java</p> <p>The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12402 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770