https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 18:06:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-06727 bdu:2022-06727 https://cve.radiocsirt.org/vuln/bdu:2022-06727 https://cve.radiocsirt.org/vuln/certfr-2022-avi-658 certfr-2022-avi-658 https://cve.radiocsirt.org/vuln/certfr-2022-avi-658 https://cve.radiocsirt.org/vuln/cleanstart-2026-gb22495 <p><strong>Affected:</strong> CleanStart: spark-sc213-jdk17-py312</p> <p>Security vulnerability affects the spark-sc213-jdk17-py312 package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: spark-sc213-jdk17-py312</p> <p>Security vulnerability affects the spark-sc213-jdk17-py312 package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-gb22495 https://cve.radiocsirt.org/vuln/euvd-2026-27603 EUVD-2026-27603 https://cve.radiocsirt.org/vuln/euvd-2026-27603 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31684 <p>A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.</p> <p>A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-31684 https://cve.radiocsirt.org/vuln/ghsa-fg2v-w576-w4v3 <p><strong>Affected:</strong> Maven: net.minidev:json-smart</p> <p>A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions prior to 1.3.3 and 2.4.5 which causes a denial of service (DOS) via a crafted web request.</p> <p><strong>Affected:</strong> Maven: net.minidev:json-smart</p> <p>A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions prior to 1.3.3 and 2.4.5 which causes a denial of service (DOS) via a crafted web request.</p> https://cve.radiocsirt.org/vuln/ghsa-fg2v-w576-w4v3 https://cve.radiocsirt.org/vuln/gsd-2021-31684 gsd-2021-31684 https://cve.radiocsirt.org/vuln/gsd-2021-31684 https://cve.radiocsirt.org/vuln/rhsa-2022:8652 <p>bootstrap: XSS in the tooltip or popover data-template attribute wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users json-smart: Denial of Service in JSONParserByteArray function minimist: prototype pollution urijs: Authorization Bypass Through User-Controlled Key http2-server: Invalid HTTP/2 requests cause DoS undertow: Large AJP request may cause DoS urijs: Leading white space bypasses protocol validation Moment.js: Path traversal in moment.locale netty: world readable temporary file containing sensitive data snakeyaml: Denial of Service due to missing nested depth limitation for collections moment: inefficient parsing algorithm resulting in DoS postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names apache-commons-configuration: Apache Commons Configuration insecure interpolation defaults snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode hsqldb: Untrusted input may lead to RCE attack apache-commons-text: variable interpolation RCE</p> <p>bootstrap: XSS in the tooltip or popover data-template attribute wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users json-smart: Denial of Service in JSONParserByteArray function minimist: prototype pollution urijs: Authorization Bypass Through User-Controlled Key http2-server: Invalid HTTP/2 requests cause DoS undertow: Large AJP request may cause DoS urijs: Leading white space bypasses protocol validation Moment.js: Path traversal in moment.locale netty: world readable temporary file containing sensitive data snakeyaml: Denial of Service due to missing nested depth limitation for collections moment: inefficient parsing algorithm resulting in DoS postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names apache-commons-configuration: Apache Commons Configuration insecure interpolation defaults snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode hsqldb: Untrusted input may lead to RCE attack apache-commons-text: variable interpolation RCE</p> https://cve.radiocsirt.org/vuln/rhsa-2022:8652 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-31684 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: json-smart, Ubuntu:20.04:LTS: json-smart, Ubuntu:22.04:LTS: json-smart</p> <p>A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: json-smart, Ubuntu:20.04:LTS: json-smart, Ubuntu:22.04:LTS: json-smart</p> <p>A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-31684 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1016 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1016