https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:18:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-03799 bdu:2023-03799 https://cve.radiocsirt.org/vuln/bdu:2023-03799 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0557 certfr-2023-avi-0557 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0557 https://cve.radiocsirt.org/vuln/euvd-2026-308150 EUVD-2026-308150 https://cve.radiocsirt.org/vuln/euvd-2026-308150 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34034 <p>Using &#34;**&#34; as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.</p> <p>Using &#34;**&#34; as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-34034 https://cve.radiocsirt.org/vuln/ghsa-3h6f-g5f3-gc4w <p><strong>Affected:</strong> Maven: org.springframework.security:spring-security-config</p> <p>Using &#34;**&#34; as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.</p> <p><strong>Affected:</strong> Maven: org.springframework.security:spring-security-config</p> <p>Using &#34;**&#34; as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.</p> https://cve.radiocsirt.org/vuln/ghsa-3h6f-g5f3-gc4w https://cve.radiocsirt.org/vuln/gsd-2023-34034 gsd-2023-34034 https://cve.radiocsirt.org/vuln/gsd-2023-34034 https://cve.radiocsirt.org/vuln/rhsa-2023:7247 <p>undertow: OutOfMemoryError due to @MultipartConfig handling okio: GzipSource class improper exception handling spring-security-webflux: path wildcard leads to security bypass jetty: hpack header values cause denial of service in http/2 jetty: Improper addition of quotation marks to user inputs in CgiServlet apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK jetty: Improper validation of HTTP/1 content-length jetty: OpenId Revoked authentication allows one request tomcat: FileUpload: DoS due to accumulation of temporary files on Windows tomcat: improper cleaning of recycled objects could lead to information leak HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) tomcat: incorrectly parsed http trailer headers can cause request smuggling activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack</p> <p>undertow: OutOfMemoryError due to @MultipartConfig handling okio: GzipSource class improper exception handling spring-security-webflux: path wildcard leads to security bypass jetty: hpack header values cause denial of service in http/2 jetty: Improper addition of quotation marks to user inputs in CgiServlet apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK jetty: Improper validation of HTTP/1 content-length jetty: OpenId Revoked authentication allows one request tomcat: FileUpload: DoS due to accumulation of temporary files on Windows tomcat: improper cleaning of recycled objects could lead to information leak HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) tomcat: incorrectly parsed http trailer headers can cause request smuggling activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack</p> https://cve.radiocsirt.org/vuln/rhsa-2023:7247 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1771 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Security ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Security ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1771