https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:01:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-04736 bdu:2024-04736 https://cve.radiocsirt.org/vuln/bdu:2024-04736 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0903 certfr-2024-avi-0903 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0903 https://cve.radiocsirt.org/vuln/cnvd-2024-22231 cnvd-2024-22231 https://cve.radiocsirt.org/vuln/cnvd-2024-22231 https://cve.radiocsirt.org/vuln/euvd-2026-217368 EUVD-2026-217368 https://cve.radiocsirt.org/vuln/euvd-2026-217368 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28752 <p>A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the default databinding) are not impacted.</p> <p>A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the default databinding) are not impacted.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-28752 https://cve.radiocsirt.org/vuln/ghsa-qmgx-j96g-4428 <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-rt-databinding-aegis</p> <p>A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the default databinding) are not impacted.</p> <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-rt-databinding-aegis</p> <p>A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the default databinding) are not impacted.</p> https://cve.radiocsirt.org/vuln/ghsa-qmgx-j96g-4428 https://cve.radiocsirt.org/vuln/gsd-2024-28752 gsd-2024-28752 https://cve.radiocsirt.org/vuln/gsd-2024-28752 https://cve.radiocsirt.org/vuln/rhsa-2024:10207 <p>undertow: client side invocation timeout raised when calling over HTTP2 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender h2: Loading of custom classes from remote servers through JNDI log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender log4j: Unsafe deserialization flaw in Chainsaw log viewer OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) hsqldb: Untrusted input may lead to RCE attack CXF: SSRF Vulnerability eap-7: heap exhaustion via deserialization xnio: StackOverflowException when the chain of notifier states becomes problematically big log4j1-socketappender: DoS via hashmap logging apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding apache-avro: Schema parsing may trigger Remote Code Execution (RCE)</p> <p>undertow: client side invocation timeout raised when calling over HTTP2 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender h2: Loading of custom classes from remote servers through JNDI log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender log4j: Unsafe deserialization flaw in Chainsaw log viewer OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) hsqldb: Untrusted input may lead to RCE attack CXF: SSRF Vulnerability eap-7: heap exhaustion via deserialization xnio: StackOverflowException when the chain of notifier states becomes problematically big log4j1-socketappender: DoS via hashmap logging apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding apache-avro: Schema parsing may trigger Remote Code Execution (RCE)</p> https://cve.radiocsirt.org/vuln/rhsa-2024:10207 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0642 <p>Ein entfernter Angreifer kann eine Schwachstelle in Apache CXF ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter Angreifer kann eine Schwachstelle in Apache CXF ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0642