https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:46:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-00276 bdu:2022-00276 https://cve.radiocsirt.org/vuln/bdu:2022-00276 https://cve.radiocsirt.org/vuln/certfr-2021-avi-556 certfr-2021-avi-556 https://cve.radiocsirt.org/vuln/certfr-2021-avi-556 https://cve.radiocsirt.org/vuln/cnvd-2021-14153 cnvd-2021-14153 https://cve.radiocsirt.org/vuln/cnvd-2021-14153 https://cve.radiocsirt.org/vuln/euvd-2026-41003 EUVD-2026-41003 https://cve.radiocsirt.org/vuln/euvd-2026-41003 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11988 <p>Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. Users should upgrade to 2.6 or later.</p> <p>Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. Users should upgrade to 2.6 or later.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-11988 https://cve.radiocsirt.org/vuln/ghsa-fmj2-7wx8-qj4v <p><strong>Affected:</strong> Maven: org.apache.xmlgraphics:xmlgraphics-commons</p> <p>Apache XmlGraphics Commons 2.4 is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.</p> <p><strong>Affected:</strong> Maven: org.apache.xmlgraphics:xmlgraphics-commons</p> <p>Apache XmlGraphics Commons 2.4 is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.</p> https://cve.radiocsirt.org/vuln/ghsa-fmj2-7wx8-qj4v https://cve.radiocsirt.org/vuln/gsd-2020-11988 gsd-2020-11988 https://cve.radiocsirt.org/vuln/gsd-2020-11988 https://cve.radiocsirt.org/vuln/oesa-2022-1649 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: xmlgraphics-commons, openEuler:20.03-LTS-SP3: xmlgraphics-commons, openEuler:22.03-LTS: xmlgraphics-commons</p> <p>Apache XML Graphics Commons is a library that consists of several reusable components used by Apache Batik and Apache FOP. Many of these components can easily be used separately outside the domains of SVG and XSL-FO. You will find components such as a PDF library, an RTF library, Graphics2D implementations that let you generate PDF and PostScript files, and much more. The Apache™ XML Graphics Commons project is part of the Apache™ Software Foundation, which is a wider community of users and developers of open source projects. Security Fix(es): Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. Users should upgrade to 2.6 or later.(CVE-2020-11988)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: xmlgraphics-commons, openEuler:20.03-LTS-SP3: xmlgraphics-commons, openEuler:22.03-LTS: xmlgraphics-commons</p> <p>Apache XML Graphics Commons is a library that consists of several reusable components used by Apache Batik and Apache FOP. Many of these components can easily be used separately outside the domains of SVG and XSL-FO. You will find components such as a PDF library, an RTF library, Graphics2D implementations that let you generate PDF and PostScript files, and much more. The Apache™ XML Graphics Commons project is part of the Apache™ Software Foundation, which is a wider community of users and developers of open source projects. Security Fix(es): Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. Users should upgrade to 2.6 or later.(CVE-2020-11988)</p> https://cve.radiocsirt.org/vuln/oesa-2022-1649 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12403-1 <p>xmlgraphics-commons-2.6-3.1 on GA media</p> <p>xmlgraphics-commons-2.6-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12403-1 https://cve.radiocsirt.org/vuln/rhsa-2021:2475 <p>xmlgraphics-commons: SSRF due to improper input validation by the XMPParser jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling XStream: arbitrary file deletion on the local host when unmarshalling XStream: allow a remote attacker to cause DoS only by manipulating the processed input stream XStream: SSRF via crafted input stream XStream: arbitrary file deletion on the local host via crafted input stream XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry XStream: Unsafe deserizaliation of sun.swing.SwingLazyValue XStream: Unsafe deserizaliation of com.sun.tools.javac.processing.JavacProcessingEnvironment NameProcessIterator XStream: ReDoS vulnerability XStream: SSRF can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host XStream: Unsafe deserizaliation of com.sun.org.apache.bcel.internal.util.ClassLoader XStream: allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream</p> <p>xmlgraphics-commons: SSRF due to improper input validation by the XMPParser jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling XStream: arbitrary file deletion on the local host when unmarshalling XStream: allow a remote attacker to cause DoS only by manipulating the processed input stream XStream: SSRF via crafted input stream XStream: arbitrary file deletion on the local host via crafted input stream XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry XStream: Unsafe deserizaliation of sun.swing.SwingLazyValue XStream: Unsafe deserizaliation of com.sun.tools.javac.processing.JavacProcessingEnvironment NameProcessIterator XStream: ReDoS vulnerability XStream: SSRF can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host XStream: Unsafe deserizaliation of com.sun.org.apache.bcel.internal.util.ClassLoader XStream: allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream</p> https://cve.radiocsirt.org/vuln/rhsa-2021:2475 https://cve.radiocsirt.org/vuln/suse-su-2022:3550-1 <p>Security update for xmlgraphics-commons</p> <p>Security update for xmlgraphics-commons</p> https://cve.radiocsirt.org/vuln/suse-su-2022:3550-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11988 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: xmlgraphics-commons, Ubuntu:18.04:LTS: xmlgraphics-commons, Ubuntu:20.04:LTS: xmlgraphics-commons, Ubuntu:22.04:LTS: xmlgraphics-commons, Ubuntu:24.04:LTS: xmlgraphics-commons, Ubuntu:25.10: xmlgraphics-commons, Ubuntu:26.04:LTS: xmlgraphics-commons</p> <p>Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. Users should upgrade to 2.6 or later.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: xmlgraphics-commons, Ubuntu:18.04:LTS: xmlgraphics-commons, Ubuntu:20.04:LTS: xmlgraphics-commons, Ubuntu:22.04:LTS: xmlgraphics-commons, Ubuntu:24.04:LTS: xmlgraphics-commons, Ubuntu:25.10: xmlgraphics-commons, Ubuntu:26.04:LTS: xmlgraphics-commons</p> <p>Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. Users should upgrade to 2.6 or later.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11988 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1017 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Financial Services Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Financial Services Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1017