https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:42:57 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08649 bdu:2023-08649 https://cve.radiocsirt.org/vuln/bdu:2023-08649 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0314 certfr-2023-avi-0314 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0314 https://cve.radiocsirt.org/vuln/cnvd-2022-79656 cnvd-2022-79656 https://cve.radiocsirt.org/vuln/cnvd-2022-79656 https://cve.radiocsirt.org/vuln/euvd-2026-308192 EUVD-2026-308192 https://cve.radiocsirt.org/vuln/euvd-2026-308192 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45047 <p>Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD &lt;= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.</p> <p>Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD &lt;= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-45047 https://cve.radiocsirt.org/vuln/ghsa-fhw8-8j55-vwgq <p><strong>Affected:</strong> Maven: org.apache.sshd:sshd-common, Maven: org.apache.sshd:sshd-core</p> <p>Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD &lt;= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.</p> <p>Until version 2.1.0, the code affected by this vulnerability appeared in `org.apache.sshd:sshd-core`. Version 2.1.0 contains a [commit](https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0) where the code was moved to the package `org.apache.sshd:sshd-common`, which did not exist until version 2.1.0.</p> <p><strong>Affected:</strong> Maven: org.apache.sshd:sshd-common, Maven: org.apache.sshd:sshd-core</p> <p>Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD &lt;= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.</p> <p>Until version 2.1.0, the code affected by this vulnerability appeared in `org.apache.sshd:sshd-core`. Version 2.1.0 contains a [commit](https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0) where the code was moved to the package `org.apache.sshd:sshd-common`, which did not exist until version 2.1.0.</p> https://cve.radiocsirt.org/vuln/ghsa-fhw8-8j55-vwgq https://cve.radiocsirt.org/vuln/gsd-2022-45047 gsd-2022-45047 https://cve.radiocsirt.org/vuln/gsd-2022-45047 https://cve.radiocsirt.org/vuln/ncsc-2026-0028 NCSC-2026-0028 https://cve.radiocsirt.org/vuln/ncsc-2026-0028 https://cve.radiocsirt.org/vuln/oesa-2022-2119 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: apache-sshd, openEuler:20.03-LTS-SP3: apache-sshd, openEuler:22.03-LTS: apache-sshd</p> <p>Apache SSHD is a 100% pure java library to support the SSH protocols on both the client and server side. Security Fix(es): Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD &amp;lt;= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.(CVE-2022-45047)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: apache-sshd, openEuler:20.03-LTS-SP3: apache-sshd, openEuler:22.03-LTS: apache-sshd</p> <p>Apache SSHD is a 100% pure java library to support the SSH protocols on both the client and server side. Security Fix(es): Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD &amp;lt;= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.(CVE-2022-45047)</p> https://cve.radiocsirt.org/vuln/oesa-2022-2119 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12511-1 <p>apache-sshd-2.9.2-1.1 on GA media</p> <p>apache-sshd-2.9.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12511-1 https://cve.radiocsirt.org/vuln/rhsa-2022:8957 <p>quarkus_dev_ui: Dev UI Config Editor is vulnerable to drive-by localhost attacks leading to RCE quarkus-vertx-http: Security misconfiguration of CORS : OWASP A05_2021 level in Quarkus mina-sshd: Java unsafe deserialization vulnerability</p> <p>quarkus_dev_ui: Dev UI Config Editor is vulnerable to drive-by localhost attacks leading to RCE quarkus-vertx-http: Security misconfiguration of CORS : OWASP A05_2021 level in Quarkus mina-sshd: Java unsafe deserialization vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2022:8957 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2302 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen und Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen und Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2302