https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:36:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01018 bdu:2021-01018 https://cve.radiocsirt.org/vuln/bdu:2021-01018 https://cve.radiocsirt.org/vuln/certfr-2020-avi-531 certfr-2020-avi-531 https://cve.radiocsirt.org/vuln/certfr-2020-avi-531 https://cve.radiocsirt.org/vuln/cnvd-2020-44096 cnvd-2020-44096 https://cve.radiocsirt.org/vuln/cnvd-2020-44096 https://cve.radiocsirt.org/vuln/euvd-2026-58423 EUVD-2026-58423 https://cve.radiocsirt.org/vuln/euvd-2026-58423 https://cve.radiocsirt.org/vuln/fkie_cve-2019-17566 <p>Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the &#34;xlink:href&#34; attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.</p> <p>Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the &#34;xlink:href&#34; attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-17566 https://cve.radiocsirt.org/vuln/ghsa-cmx4-p4v5-hmr5 <p><strong>Affected:</strong> Maven: org.apache.xmlgraphics:batik</p> <p>Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the &#34;xlink:href&#34; attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.</p> <p><strong>Affected:</strong> Maven: org.apache.xmlgraphics:batik</p> <p>Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the &#34;xlink:href&#34; attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.</p> https://cve.radiocsirt.org/vuln/ghsa-cmx4-p4v5-hmr5 https://cve.radiocsirt.org/vuln/gsd-2019-17566 gsd-2019-17566 https://cve.radiocsirt.org/vuln/gsd-2019-17566 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0851-1 <p>Security update for xmlgraphics-batik</p> <p>Security update for xmlgraphics-batik</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0851-1 https://cve.radiocsirt.org/vuln/rhsa-2020:4960 <p>hibernate: SQL injection issue in Hibernate ORM batik: SSRF via &#34;xlink:href&#34; Wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain ant: insecure temporary file vulnerability cxf: JMX integration is vulnerable to a MITM attack mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete mysql-connector-java: allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized partial DoS mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete dom4j: XML External Entity vulnerability in default SAX parser hibernate-validator: Improper input validation in the interpolation of constraint error messages wildfly-elytron: session fixation when using FORM authentication</p> <p>hibernate: SQL injection issue in Hibernate ORM batik: SSRF via &#34;xlink:href&#34; Wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain ant: insecure temporary file vulnerability cxf: JMX integration is vulnerable to a MITM attack mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete mysql-connector-java: allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized partial DoS mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete dom4j: XML External Entity vulnerability in default SAX parser hibernate-validator: Improper input validation in the interpolation of constraint error messages wildfly-elytron: session fixation when using FORM authentication</p> https://cve.radiocsirt.org/vuln/rhsa-2020:4960 https://cve.radiocsirt.org/vuln/suse-su-2020:1800-1 <p>Security update for xmlgraphics-batik</p> <p>Security update for xmlgraphics-batik</p> https://cve.radiocsirt.org/vuln/suse-su-2020:1800-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-17566 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: batik, Ubuntu:Pro:16.04:LTS: batik, Ubuntu:18.04:LTS: batik, Ubuntu:20.04:LTS: batik</p> <p>Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the &#34;xlink:href&#34; attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: batik, Ubuntu:Pro:16.04:LTS: batik, Ubuntu:18.04:LTS: batik, Ubuntu:20.04:LTS: batik</p> <p>Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the &#34;xlink:href&#34; attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-17566 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0027 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und nicht spezifizierte Auswirkungen zu verursachen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und nicht spezifizierte Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0027