https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:31:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07354 bdu:2023-07354 https://cve.radiocsirt.org/vuln/bdu:2023-07354 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0047 certfr-2024-avi-0047 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0047 https://cve.radiocsirt.org/vuln/euvd-2026-258472 EUVD-2026-258472 https://cve.radiocsirt.org/vuln/euvd-2026-258472 https://cve.radiocsirt.org/vuln/fkie_cve-2023-44483 <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-44483 https://cve.radiocsirt.org/vuln/ghsa-xfrj-6vvc-3xm2 <p><strong>Affected:</strong> Maven: org.apache.santuario:xmlsec</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.</p> <p><strong>Affected:</strong> Maven: org.apache.santuario:xmlsec</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-xfrj-6vvc-3xm2 https://cve.radiocsirt.org/vuln/gsd-2023-44483 gsd-2023-44483 https://cve.radiocsirt.org/vuln/gsd-2023-44483 https://cve.radiocsirt.org/vuln/oesa-2025-2380 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: xml-security</p> <p>The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing. Security Fix(es):</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.(CVE-2023-44483)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: xml-security</p> <p>The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing. Security Fix(es):</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.(CVE-2023-44483)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2380 https://cve.radiocsirt.org/vuln/rhsa-2024:0710 <p>jgit: arbitrary file overwrite santuario: Private Key disclosure in debug-log output</p> <p>jgit: arbitrary file overwrite santuario: Private Key disclosure in debug-log output</p> https://cve.radiocsirt.org/vuln/rhsa-2024:0710 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-44483 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libxml-security-java, Ubuntu:18.04:LTS: libxml-security-java, Ubuntu:20.04:LTS: libxml-security-java, Ubuntu:22.04:LTS: libxml-security-java, Ubuntu:24.04:LTS: libxml-security-java, Ubuntu:25.10: libxml-security-java, Ubuntu:26.04:LTS: libxml-security-java</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libxml-security-java, Ubuntu:18.04:LTS: libxml-security-java, Ubuntu:20.04:LTS: libxml-security-java, Ubuntu:22.04:LTS: libxml-security-java, Ubuntu:24.04:LTS: libxml-security-java, Ubuntu:25.10: libxml-security-java, Ubuntu:26.04:LTS: libxml-security-java</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-44483 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2943 <p>Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2943