https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 19:14:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02738 bdu:2024-02738 https://cve.radiocsirt.org/vuln/bdu:2024-02738 https://cve.radiocsirt.org/vuln/euvd-2026-232562 EUVD-2026-232562 https://cve.radiocsirt.org/vuln/euvd-2026-232562 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27905 <p>** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora.</p> <p>An endpoint exposing internals to unauthenticated users can be used as a &#34;padding oracle&#34; allowing an anonymous attacker to construct a valid authentication cookie. Potentially this could be combined with vulnerabilities in other components to achieve remote code execution.</p> <p>As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.</p> <p>NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p> <p>** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora.</p> <p>An endpoint exposing internals to unauthenticated users can be used as a &#34;padding oracle&#34; allowing an anonymous attacker to construct a valid authentication cookie. Potentially this could be combined with vulnerabilities in other components to achieve remote code execution.</p> <p>As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.</p> <p>NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-27905 https://cve.radiocsirt.org/vuln/ghsa-ggxq-hxrv-fq5c <p>** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora.</p> <p>An endpoint exposing internals to unauthenticated users can be used as a &#34;padding oracle&#34; allowing an anonymous attacker to construct a valid authentication cookie. Potentially this could be combined with vulnerabilities in other components to achieve remote code execution.</p> <p>As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.</p> <p>NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p> <p>** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora.</p> <p>An endpoint exposing internals to unauthenticated users can be used as a &#34;padding oracle&#34; allowing an anonymous attacker to construct a valid authentication cookie. Potentially this could be combined with vulnerabilities in other components to achieve remote code execution.</p> <p>As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.</p> <p>NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p> https://cve.radiocsirt.org/vuln/ghsa-ggxq-hxrv-fq5c https://cve.radiocsirt.org/vuln/gsd-2024-27905 gsd-2024-27905 https://cve.radiocsirt.org/vuln/gsd-2024-27905