https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:36:32 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-00080 bdu:2023-00080 https://cve.radiocsirt.org/vuln/bdu:2023-00080 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0325 certfr-2023-avi-0325 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0325 https://cve.radiocsirt.org/vuln/cleanstart-2026-bn50776 <p><strong>Affected:</strong> CleanStart: spark-sc213-jdk17-py312</p> <p>Security vulnerability affects the spark-sc213-jdk17-py312 package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: spark-sc213-jdk17-py312</p> <p>Security vulnerability affects the spark-sc213-jdk17-py312 package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-bn50776 https://cve.radiocsirt.org/vuln/euvd-2026-234971 EUVD-2026-234971 https://cve.radiocsirt.org/vuln/euvd-2026-234971 https://cve.radiocsirt.org/vuln/fkie_cve-2021-37533 <p>Prior to Apache Commons Net 3.9.0, Net&#39;s FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711.</p> <p>Prior to Apache Commons Net 3.9.0, Net&#39;s FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-37533 https://cve.radiocsirt.org/vuln/ghsa-cgp8-4m63-fhh5 <p><strong>Affected:</strong> Maven: commons-net:commons-net</p> <p>Prior to Apache Commons Net 3.9.0, Net&#39;s FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711.</p> <p><strong>Affected:</strong> Maven: commons-net:commons-net</p> <p>Prior to Apache Commons Net 3.9.0, Net&#39;s FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711.</p> https://cve.radiocsirt.org/vuln/ghsa-cgp8-4m63-fhh5 https://cve.radiocsirt.org/vuln/gsd-2021-37533 gsd-2021-37533 https://cve.radiocsirt.org/vuln/gsd-2021-37533 https://cve.radiocsirt.org/vuln/oesa-2023-1882 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: apache-commons-net, openEuler:20.03-LTS-SP3: apache-commons-net, openEuler:22.03-LTS: apache-commons-net, openEuler:22.03-LTS-SP1: apache-commons-net, openEuler:22.03-LTS-SP2: apache-commons-net</p> <p>Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois Security Fix(es): Prior to Apache Commons Net 3.9.0, Net&amp;apos;s FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711.(CVE-2021-37533)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: apache-commons-net, openEuler:20.03-LTS-SP3: apache-commons-net, openEuler:22.03-LTS: apache-commons-net, openEuler:22.03-LTS-SP1: apache-commons-net, openEuler:22.03-LTS-SP2: apache-commons-net</p> <p>Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois Security Fix(es): Prior to Apache Commons Net 3.9.0, Net&amp;apos;s FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711.(CVE-2021-37533)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1882 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12549-1 <p>apache-commons-net-3.9.0-1.1 on GA media</p> <p>apache-commons-net-3.9.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12549-1 https://cve.radiocsirt.org/vuln/rhsa-2023:2100 <p>apache-commons-net: FTP client trusts the host from PASV response by default undertow: Server identity in https connection is not checked by the undertow client snakeyaml: Denial of Service due to missing nested depth limitation for collections apache-spark: XSS vulnerability in log viewer UI Javascript Pulsar: Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM apache-ivy: Directory Traversal Ivy: Ivy Path traversal batik: Server-Side Request Forgery batik: Server-Side Request Forgery snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode scandium: Failing DTLS handshakes may cause throttling to block processing of records batik: Server-Side Request Forgery (SSRF) vulnerability jettison: memory exhaustion via user-supplied XML or JSON data xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks batik: Apache XML Graphics Batik vulnerable to code execution via SVG JXPath: untrusted XPath expressions may lead to RCE attack hsqldb: Untrusted input may lead to RC…</p> <p>apache-commons-net: FTP client trusts the host from PASV response by default undertow: Server identity in https connection is not checked by the undertow client snakeyaml: Denial of Service due to missing nested depth limitation for collections apache-spark: XSS vulnerability in log viewer UI Javascript Pulsar: Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM apache-ivy: Directory Traversal Ivy: Ivy Path traversal batik: Server-Side Request Forgery batik: Server-Side Request Forgery snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode scandium: Failing DTLS handshakes may cause throttling to block processing of records batik: Server-Side Request Forgery (SSRF) vulnerability jettison: memory exhaustion via user-supplied XML or JSON data xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks batik: Apache XML Graphics Batik vulnerable to code execution via SVG JXPath: untrusted XPath expressions may lead to RCE attack hsqldb: Untrusted input may lead to RC…</p> https://cve.radiocsirt.org/vuln/rhsa-2023:2100 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-37533 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libcommons-net-java, Ubuntu:18.04:LTS: libcommons-net-java, Ubuntu:20.04:LTS: libcommons-net-java, Ubuntu:22.04:LTS: libcommons-net-java</p> <p>Prior to Apache Commons Net 3.9.0, Net&#39;s FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libcommons-net-java, Ubuntu:18.04:LTS: libcommons-net-java, Ubuntu:20.04:LTS: libcommons-net-java, Ubuntu:22.04:LTS: libcommons-net-java</p> <p>Prior to Apache Commons Net 3.9.0, Net&#39;s FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-37533 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2264 <p>Ein Angreifer kann mehrere Schwachstellen in SOS GmbH JobScheduler ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in SOS GmbH JobScheduler ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2264