https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:04:49 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0034 certfr-2023-avi-0034 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0034 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40153 <p>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.</p> <p>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-40153 https://cve.radiocsirt.org/vuln/ghsa-fv22-xp26-mm9w <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Maven: com.fasterxml.woodstox:woodstox-core</p> <p>## Withdrawn</p> <p>This advisory has been withdrawn because it has been found to be a duplicate. Please see the issue [here](https://github.com/x-stream/xstream/issues/304#issuecomment-1293654236) for more information.</p> <p>## Original Despcription</p> <p>Those using FasterXML/woodstox to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.</p> <p>This vulnerability is only relevant for users making use of the DTD parsing functionality.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Maven: com.fasterxml.woodstox:woodstox-core</p> <p>## Withdrawn</p> <p>This advisory has been withdrawn because it has been found to be a duplicate. Please see the issue [here](https://github.com/x-stream/xstream/issues/304#issuecomment-1293654236) for more information.</p> <p>## Original Despcription</p> <p>Those using FasterXML/woodstox to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.</p> <p>This vulnerability is only relevant for users making use of the DTD parsing functionality.</p> https://cve.radiocsirt.org/vuln/ghsa-fv22-xp26-mm9w https://cve.radiocsirt.org/vuln/gsd-2022-40153 gsd-2022-40153 https://cve.radiocsirt.org/vuln/gsd-2022-40153 https://cve.radiocsirt.org/vuln/rhsa-2023:0469 <p>jettison: parser crash by stackoverflow jettison: memory exhaustion via user-supplied XML or JSON data xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays apache-commons-text: variable interpolation RCE</p> <p>jettison: parser crash by stackoverflow jettison: memory exhaustion via user-supplied XML or JSON data xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays apache-commons-text: variable interpolation RCE</p> https://cve.radiocsirt.org/vuln/rhsa-2023:0469 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-40153 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libxstream-java</p> <p>** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libxstream-java</p> <p>** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-40153 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2264 <p>Ein Angreifer kann mehrere Schwachstellen in SOS GmbH JobScheduler ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in SOS GmbH JobScheduler ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2264