Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 18:41:58 +0000 EUVD-2026-21115 https://cve.radiocsirt.org/vuln/euvd-2026-21115 EUVD-2026-21115 https://cve.radiocsirt.org/vuln/euvd-2026-21115 fkie_cve-2021-3814 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3814 <p>It was found that 3scale&#39;s APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conceivably bypasses access controls and permits unauthorized information disclosure.</p> <p>It was found that 3scale&#39;s APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conceivably bypasses access controls and permits unauthorized information disclosure.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3814 GHSA-46fh-44xx-6xgh https://cve.radiocsirt.org/vuln/ghsa-46fh-44xx-6xgh <p>It was found that 3scale&#39;s APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conceivably bypasses access controls and permits unauthorized information disclosure.</p> <p>It was found that 3scale&#39;s APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conceivably bypasses access controls and permits unauthorized information disclosure.</p> https://cve.radiocsirt.org/vuln/ghsa-46fh-44xx-6xgh gsd-2021-3814 https://cve.radiocsirt.org/vuln/gsd-2021-3814 gsd-2021-3814 https://cve.radiocsirt.org/vuln/gsd-2021-3814 RHSA-2021:3851 — Red Hat Security Advisory: Red Hat 3scale API Management 2.11.0 Release - Container Images https://cve.radiocsirt.org/vuln/rhsa-2021:3851 <p>aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang RHOAM: XSS in 3scale at various places 3scale: missing validation of access token nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name</p> <p>aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang RHOAM: XSS in 3scale at various places 3scale: missing validation of access token nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name</p> https://cve.radiocsirt.org/vuln/rhsa-2021:3851