https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:40:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-222144 EUVD-2026-222144 https://cve.radiocsirt.org/vuln/euvd-2026-222144 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4492 <p>The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.</p> <p>The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-4492 https://cve.radiocsirt.org/vuln/ghsa-pfcc-3g6r-8rg8 <p><strong>Affected:</strong> Maven: io.undertow:undertow-core</p> <p>The undertow client is not checking the server identity presented by the server certificate in https connections. This should be performed by default in https and in http/2.</p> <p><strong>Affected:</strong> Maven: io.undertow:undertow-core</p> <p>The undertow client is not checking the server identity presented by the server certificate in https connections. This should be performed by default in https and in http/2.</p> https://cve.radiocsirt.org/vuln/ghsa-pfcc-3g6r-8rg8 https://cve.radiocsirt.org/vuln/gsd-2022-4492 gsd-2022-4492 https://cve.radiocsirt.org/vuln/gsd-2022-4492 https://cve.radiocsirt.org/vuln/rhsa-2023:1512 <p>SnakeYaml: Constructor Deserialization Remote Code Execution undertow: Server identity in https connection is not checked by the undertow client snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode hsqldb: Untrusted input may lead to RCE attack dev-java/snakeyaml: DoS via stack overflow codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider RESTEasy: creation of insecure temp files Undertow: Infinite loop in SslConduit during close</p> <p>SnakeYaml: Constructor Deserialization Remote Code Execution undertow: Server identity in https connection is not checked by the undertow client snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode hsqldb: Untrusted input may lead to RCE attack dev-java/snakeyaml: DoS via stack overflow codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider RESTEasy: creation of insecure temp files Undertow: Infinite loop in SslConduit during close</p> https://cve.radiocsirt.org/vuln/rhsa-2023:1512 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4492 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow</p> <p>The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow</p> <p>The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4492 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0749 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0749