https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:26:34 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07907 bdu:2023-07907 https://cve.radiocsirt.org/vuln/bdu:2023-07907 https://cve.radiocsirt.org/vuln/certfr-2022-avi-366 certfr-2022-avi-366 https://cve.radiocsirt.org/vuln/certfr-2022-avi-366 https://cve.radiocsirt.org/vuln/euvd-2026-31313 EUVD-2026-31313 https://cve.radiocsirt.org/vuln/euvd-2026-31313 https://cve.radiocsirt.org/vuln/fkie_cve-2021-40690 <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the &#34;secureValidation&#34; property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the &#34;secureValidation&#34; property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-40690 https://cve.radiocsirt.org/vuln/ghsa-j8wc-gxx9-82hx <p><strong>Affected:</strong> Maven: org.apache.santuario:xmlsec</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the &#34;secureValidation&#34; property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.</p> <p><strong>Affected:</strong> Maven: org.apache.santuario:xmlsec</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the &#34;secureValidation&#34; property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.</p> https://cve.radiocsirt.org/vuln/ghsa-j8wc-gxx9-82hx https://cve.radiocsirt.org/vuln/gsd-2021-40690 gsd-2021-40690 https://cve.radiocsirt.org/vuln/gsd-2021-40690 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11693-1 <p>xml-security-2.1.7-1.1 on GA media</p> <p>xml-security-2.1.7-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11693-1 https://cve.radiocsirt.org/vuln/rhsa-2021:4679 <p>undertow: potential security issue in flow control over HTTP/2 may lead to DOS wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users resteasy: Error message exposes endpoint class information mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck xml-security: XPath Transform abuse allows for information disclosure</p> <p>undertow: potential security issue in flow control over HTTP/2 may lead to DOS wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users resteasy: Error message exposes endpoint class information mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck xml-security: XPath Transform abuse allows for information disclosure</p> https://cve.radiocsirt.org/vuln/rhsa-2021:4679 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-40690 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libxml-security-java, Ubuntu:18.04:LTS: libxml-security-java, Ubuntu:20.04:LTS: libxml-security-java</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the &#34;secureValidation&#34; property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libxml-security-java, Ubuntu:18.04:LTS: libxml-security-java, Ubuntu:20.04:LTS: libxml-security-java</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the &#34;secureValidation&#34; property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-40690 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0607 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0607