https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:05:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-45734 EUVD-2026-45734 https://cve.radiocsirt.org/vuln/euvd-2026-45734 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25711 <p>A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role.</p> <p>A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-25711 https://cve.radiocsirt.org/vuln/ghsa-8674-26jc-wh98 <p><strong>Affected:</strong> Maven: org.infinispan:infinispan-core</p> <p>A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role.</p> <p><strong>Affected:</strong> Maven: org.infinispan:infinispan-core</p> <p>A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role.</p> https://cve.radiocsirt.org/vuln/ghsa-8674-26jc-wh98 https://cve.radiocsirt.org/vuln/gsd-2020-25711 gsd-2020-25711 https://cve.radiocsirt.org/vuln/gsd-2020-25711 https://cve.radiocsirt.org/vuln/rhsa-2021:0433 <p>wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL infinispan: authorization check missing for server management operations XStream: remote code execution due to insecure XML deserialization when relying on blocklists</p> <p>wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL infinispan: authorization check missing for server management operations XStream: remote code execution due to insecure XML deserialization when relying on blocklists</p> https://cve.radiocsirt.org/vuln/rhsa-2021:0433 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180