https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:51:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-32143 EUVD-2026-32143 https://cve.radiocsirt.org/vuln/euvd-2026-32143 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42575 <p>The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.</p> <p>The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-42575 https://cve.radiocsirt.org/vuln/ghsa-3w73-fmf3-hg5c <p><strong>Affected:</strong> Maven: com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer</p> <p>The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the `SELECT`, `STYLE`, and `OPTION` elements.</p> <p><strong>Affected:</strong> Maven: com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer</p> <p>The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the `SELECT`, `STYLE`, and `OPTION` elements.</p> https://cve.radiocsirt.org/vuln/ghsa-3w73-fmf3-hg5c https://cve.radiocsirt.org/vuln/gsd-2021-42575 gsd-2021-42575 https://cve.radiocsirt.org/vuln/gsd-2021-42575 https://cve.radiocsirt.org/vuln/rhsa-2022:7409 <p>jackson-databind: denial of service via a large depth of nested objects h2: Remote Code Execution in Console owasp-java-html-sanitizer: improper policies enforcement may lead to remote code execution netty: control chars in header names may lead to HTTP request smuggling xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr keycloak: Stored XSS in groups dropdown jboss-client: memory leakage in remote client transaction wildfly: Wildfly management of EJB Session context returns wrong caller principal with Elytron Security enabled undertow: Double AJP response for 400 from EAP 7 results in CPING failures keycloak: Uploading of SAML javascript protocol mapper scripts through the admin console artemis-commons: Apache ActiveMQ Artemis DoS</p> <p>jackson-databind: denial of service via a large depth of nested objects h2: Remote Code Execution in Console owasp-java-html-sanitizer: improper policies enforcement may lead to remote code execution netty: control chars in header names may lead to HTTP request smuggling xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr keycloak: Stored XSS in groups dropdown jboss-client: memory leakage in remote client transaction wildfly: Wildfly management of EJB Session context returns wrong caller principal with Elytron Security enabled undertow: Double AJP response for 400 from EAP 7 results in CPING failures keycloak: Uploading of SAML javascript protocol mapper scripts through the admin console artemis-commons: Apache ActiveMQ Artemis DoS</p> https://cve.radiocsirt.org/vuln/rhsa-2022:7409 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1023 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Commerce ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Commerce ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1023