https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 06:18:50 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:7326 <p><strong>Affected:</strong> AlmaLinux:9: pki-acme, AlmaLinux:9: pki-base, AlmaLinux:9: pki-base-java, AlmaLinux:9: pki-ca, AlmaLinux:9: pki-kra, AlmaLinux:9: pki-server, AlmaLinux:9: pki-symkey, AlmaLinux:9: pki-tools, AlmaLinux:9: python3-pki</p> <p>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.</p> <p>Security Fix(es):</p> <p>* pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: pki-acme, AlmaLinux:9: pki-base, AlmaLinux:9: pki-base-java, AlmaLinux:9: pki-ca, AlmaLinux:9: pki-kra, AlmaLinux:9: pki-server, AlmaLinux:9: pki-symkey, AlmaLinux:9: pki-tools, AlmaLinux:9: python3-pki</p> <p>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.</p> <p>Security Fix(es):</p> <p>* pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2022:7326 https://cve.radiocsirt.org/vuln/bdu:2022-05089 bdu:2022-05089 https://cve.radiocsirt.org/vuln/bdu:2022-05089 https://cve.radiocsirt.org/vuln/euvd-2026-12356 EUVD-2026-12356 https://cve.radiocsirt.org/vuln/euvd-2026-12356 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2414 <p>Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.</p> <p>Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2414 https://cve.radiocsirt.org/vuln/ghsa-vjf8-hc3f-mpw4 <p>Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.</p> <p>Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.</p> https://cve.radiocsirt.org/vuln/ghsa-vjf8-hc3f-mpw4 https://cve.radiocsirt.org/vuln/gsd-2022-2414 gsd-2022-2414 https://cve.radiocsirt.org/vuln/gsd-2022-2414 https://cve.radiocsirt.org/vuln/oesa-2023-1417 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: pki-core</p> <p>Dogtag PKI is a designed enterprise software system manage enterprise Public Key Infrastructure deployments.</p> <p>Security Fix(es):</p> <p>Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.(CVE-2022-2414)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: pki-core</p> <p>Dogtag PKI is a designed enterprise software system manage enterprise Public Key Infrastructure deployments.</p> <p>Security Fix(es):</p> <p>Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.(CVE-2022-2414)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1417 https://cve.radiocsirt.org/vuln/rhsa-2022:7326 <p>pki-core: access to external entities when parsing XML can lead to XXE</p> <p>pki-core: access to external entities when parsing XML can lead to XXE</p> https://cve.radiocsirt.org/vuln/rhsa-2022:7326 https://cve.radiocsirt.org/vuln/rhsa-2022:8915 <p>pki-core: access to external entities when parsing XML can lead to XXE</p> <p>pki-core: access to external entities when parsing XML can lead to XXE</p> https://cve.radiocsirt.org/vuln/rhsa-2022:8915 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2414 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki, Ubuntu:Pro:22.04:LTS: dogtag-pki</p> <p>Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki, Ubuntu:Pro:22.04:LTS: dogtag-pki</p> <p>Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2414 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1944 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1944