https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:02:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-05966 bdu:2024-05966 https://cve.radiocsirt.org/vuln/bdu:2024-05966 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0106 certfr-2025-avi-0106 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0106 https://cve.radiocsirt.org/vuln/euvd-2026-201749 EUVD-2026-201749 https://cve.radiocsirt.org/vuln/euvd-2026-201749 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29736 <p>A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The attack only applies if a custom stylesheet parameter is configured.</p> <p>A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The attack only applies if a custom stylesheet parameter is configured.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-29736 https://cve.radiocsirt.org/vuln/ghsa-5m3j-pxh7-455p <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-rt-rs-service-description</p> <p>A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The attack only applies if a custom stylesheet parameter is configured.</p> <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-rt-rs-service-description</p> <p>A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The attack only applies if a custom stylesheet parameter is configured.</p> https://cve.radiocsirt.org/vuln/ghsa-5m3j-pxh7-455p https://cve.radiocsirt.org/vuln/gsd-2024-29736 gsd-2024-29736 https://cve.radiocsirt.org/vuln/gsd-2024-29736 https://cve.radiocsirt.org/vuln/rhsa-2024:2707 <p>guava: insecure temporary directory creation xnio: StackOverflowException when the chain of notifier states becomes problematically big jackson-databind: denial of service via cylic dependencies json-path: stack-based buffer overflow in Criteria.parse method tomcat: Leaking of unrelated request bodies in default error page apache: cxf: org.apache.cxf:cxf-rt-rs-service-description: SSRF via WADL stylesheet parameter apache: cxf: org.apache.cxf:cxf-rt-rs-security-jose: Denial of Service vulnerability in JOSE</p> <p>guava: insecure temporary directory creation xnio: StackOverflowException when the chain of notifier states becomes problematically big jackson-databind: denial of service via cylic dependencies json-path: stack-based buffer overflow in Criteria.parse method tomcat: Leaking of unrelated request bodies in default error page apache: cxf: org.apache.cxf:cxf-rt-rs-service-description: SSRF via WADL stylesheet parameter apache: cxf: org.apache.cxf:cxf-rt-rs-security-jose: Denial of Service vulnerability in JOSE</p> https://cve.radiocsirt.org/vuln/rhsa-2024:2707 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1678 <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.</p> <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1678