https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:57:15 +0000 https://cve.radiocsirt.org/vuln/bit-neo4j-2021-34371 <p><strong>Affected:</strong> Bitnami: neo4j</p> <p>Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies with exploitable gadget chains.</p> <p><strong>Affected:</strong> Bitnami: neo4j</p> <p>Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies with exploitable gadget chains.</p> https://cve.radiocsirt.org/vuln/bit-neo4j-2021-34371 https://cve.radiocsirt.org/vuln/euvd-2026-28777 EUVD-2026-28777 https://cve.radiocsirt.org/vuln/euvd-2026-28777 https://cve.radiocsirt.org/vuln/fkie_cve-2021-34371 <p>Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies with exploitable gadget chains.</p> <p>Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies with exploitable gadget chains.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-34371 https://cve.radiocsirt.org/vuln/ghsa-pc4w-8v5j-29w9 <p><strong>Affected:</strong> Maven: org.neo4j:neo4j</p> <p>Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies with exploitable gadget chains.</p> <p><strong>Affected:</strong> Maven: org.neo4j:neo4j</p> <p>Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies with exploitable gadget chains.</p> https://cve.radiocsirt.org/vuln/ghsa-pc4w-8v5j-29w9 https://cve.radiocsirt.org/vuln/gsd-2021-34371 gsd-2021-34371 https://cve.radiocsirt.org/vuln/gsd-2021-34371