https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:06:14 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01536 bdu:2024-01536 https://cve.radiocsirt.org/vuln/bdu:2024-01536 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0154 certfr-2025-avi-0154 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0154 https://cve.radiocsirt.org/vuln/euvd-2026-12719 EUVD-2026-12719 https://cve.radiocsirt.org/vuln/euvd-2026-12719 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4244 <p>A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with &#34;dot-dot-slash (../)&#34; sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.</p> <p>A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with &#34;dot-dot-slash (../)&#34; sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-4244 https://cve.radiocsirt.org/vuln/ghsa-g6ph-x5wf-g337 <p><strong>Affected:</strong> Maven: org.codehaus.plexus:plexus-utils</p> <p>A flaw was found in plexus-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with dot-dot-slash (`../`) sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.</p> <p><strong>Affected:</strong> Maven: org.codehaus.plexus:plexus-utils</p> <p>A flaw was found in plexus-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with dot-dot-slash (`../`) sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.</p> https://cve.radiocsirt.org/vuln/ghsa-g6ph-x5wf-g337 https://cve.radiocsirt.org/vuln/gsd-2022-4244 gsd-2022-4244 https://cve.radiocsirt.org/vuln/gsd-2022-4244 https://cve.radiocsirt.org/vuln/rhsa-2023:2135 <p>keycloak: path traversal via double URL encoding codehaus-plexus: Directory Traversal codehaus-plexus: XML External Entity (XXE) Injection jettison: parser crash by stackoverflow jettison: memory exhaustion via user-supplied XML or JSON data jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays apache-commons-text: variable interpolation RCE jettison: If the value in map is the map&#39;s self, the new new JSONObject(map) cause StackOverflowError which may lead to dos CXF: directory listing / code exfiltration CXF: SSRF Vulnerability Undertow: Infinite loop in SslConduit during close</p> <p>keycloak: path traversal via double URL encoding codehaus-plexus: Directory Traversal codehaus-plexus: XML External Entity (XXE) Injection jettison: parser crash by stackoverflow jettison: memory exhaustion via user-supplied XML or JSON data jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays apache-commons-text: variable interpolation RCE jettison: If the value in map is the map&#39;s self, the new new JSONObject(map) cause StackOverflowError which may lead to dos CXF: directory listing / code exfiltration CXF: SSRF Vulnerability Undertow: Infinite loop in SslConduit during close</p> https://cve.radiocsirt.org/vuln/rhsa-2023:2135 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4244 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: plexus-utils2, Ubuntu:16.04:LTS: plexus-utils2, Ubuntu:18.04:LTS: plexus-utils2</p> <p>A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with &#34;dot-dot-slash (../)&#34; sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: plexus-utils2, Ubuntu:16.04:LTS: plexus-utils2, Ubuntu:18.04:LTS: plexus-utils2</p> <p>A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with &#34;dot-dot-slash (../)&#34; sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4244 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0094 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Atlassian Bamboo ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Request Smuggling-Angriff durchzuführen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Atlassian Bamboo ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Request Smuggling-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0094