https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:11:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-00728 bdu:2021-00728 https://cve.radiocsirt.org/vuln/bdu:2021-00728 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0484 certfr-2023-avi-0484 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0484 https://cve.radiocsirt.org/vuln/cnvd-2020-41183 cnvd-2020-41183 https://cve.radiocsirt.org/vuln/cnvd-2020-41183 https://cve.radiocsirt.org/vuln/euvd-2026-40972 EUVD-2026-40972 https://cve.radiocsirt.org/vuln/euvd-2026-40972 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11971 <p>Apache Camel&#39;s JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0.</p> <p>Apache Camel&#39;s JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-11971 https://cve.radiocsirt.org/vuln/ghsa-hfg5-xpvw-c9x4 <p><strong>Affected:</strong> Maven: org.apache.camel:camel, Maven: org.apache.camel:camel-core, Maven: org.apache.camel:camel-management</p> <p>Apache Camel&#39;s JMX is vulnerable to Rebind Flaw. Apache Camel users should upgrade to 3.2.0.</p> <p><strong>Affected:</strong> Maven: org.apache.camel:camel, Maven: org.apache.camel:camel-core, Maven: org.apache.camel:camel-management</p> <p>Apache Camel&#39;s JMX is vulnerable to Rebind Flaw. Apache Camel users should upgrade to 3.2.0.</p> https://cve.radiocsirt.org/vuln/ghsa-hfg5-xpvw-c9x4 https://cve.radiocsirt.org/vuln/gsd-2020-11971 gsd-2020-11971 https://cve.radiocsirt.org/vuln/gsd-2020-11971 https://cve.radiocsirt.org/vuln/rhsa-2020:5568 <p>jackson-modules-java8: DoS due to an Improper Input Validation thrift: Endless loop when feed with specific input data thrift: Out-of-bounds read related to TJSONProtocol or TSimpleJSONProtocol mysql-connector-java: privilege escalation in MySQL connector spring-ws: XML External Entity Injection (XXE) when receiving XML data from untrusted sources spring-batch: XML External Entity Injection (XXE) when receiving XML data from untrusted sources codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities hibernate-validator: safeHTML validator allows XSS AngularJS: Prototype pollution in merge function could result in code injection org.eclipse.paho.client.mqttv3: Improper hostname validation in the MQTT library cxf: does not restrict the number of message attachments cxf: OpenId Connect token service does not properly validate the clientId libquartz: XXE attacks via job description hibernate: SQL injection issue in Hibernate ORM batik: SSRF via &#34;xlink:href&#34; jetty: double release of resource can lead to information disclosure Undertow: Memory Leak in Undertow HttpOpenListener due to holding remoting connections indefinitely keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain tika: excessive memory usage in PSDParser apache-flink: JMX information disclosure vulnerability springframework: RFD attack via Content-Dispos…</p> <p>jackson-modules-java8: DoS due to an Improper Input Validation thrift: Endless loop when feed with specific input data thrift: Out-of-bounds read related to TJSONProtocol or TSimpleJSONProtocol mysql-connector-java: privilege escalation in MySQL connector spring-ws: XML External Entity Injection (XXE) when receiving XML data from untrusted sources spring-batch: XML External Entity Injection (XXE) when receiving XML data from untrusted sources codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities hibernate-validator: safeHTML validator allows XSS AngularJS: Prototype pollution in merge function could result in code injection org.eclipse.paho.client.mqttv3: Improper hostname validation in the MQTT library cxf: does not restrict the number of message attachments cxf: OpenId Connect token service does not properly validate the clientId libquartz: XXE attacks via job description hibernate: SQL injection issue in Hibernate ORM batik: SSRF via &#34;xlink:href&#34; jetty: double release of resource can lead to information disclosure Undertow: Memory Leak in Undertow HttpOpenListener due to holding remoting connections indefinitely keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain tika: excessive memory usage in PSDParser apache-flink: JMX information disclosure vulnerability springframework: RFD attack via Content-Dispos…</p> https://cve.radiocsirt.org/vuln/rhsa-2020:5568 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1548 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand zu verursachen, Sicherheitsvorkehrungen zu umgehen oder sonstige Auswirkungen verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand zu verursachen, Sicherheitsvorkehrungen zu umgehen oder sonstige Auswirkungen verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1548