https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 14:12:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-04429 bdu:2024-04429 https://cve.radiocsirt.org/vuln/bdu:2024-04429 https://cve.radiocsirt.org/vuln/euvd-2026-217428 EUVD-2026-217428 https://cve.radiocsirt.org/vuln/euvd-2026-217428 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36522 <p>The default configuration of XSLTResourceStream.java is vulnerable to remote code execution via XSLT injection when processing input from an untrusted source without validation. Users are recommended to upgrade to versions 10.1.0, 9.18.0 or 8.16.0, which fix this issue.</p> <p>The default configuration of XSLTResourceStream.java is vulnerable to remote code execution via XSLT injection when processing input from an untrusted source without validation. Users are recommended to upgrade to versions 10.1.0, 9.18.0 or 8.16.0, which fix this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-36522 https://cve.radiocsirt.org/vuln/ghsa-hhwc-gh8h-9rrp <p><strong>Affected:</strong> Maven: org.apache.wicket:wicket-util</p> <p>The default configuration of XSLTResourceStream.java is vulnerable to remote code execution via XSLT injection when processing input from an untrusted source without validation. Users are recommended to upgrade to versions 10.1.0, 9.18.0 or 8.16.0, which fix this issue.</p> <p><strong>Affected:</strong> Maven: org.apache.wicket:wicket-util</p> <p>The default configuration of XSLTResourceStream.java is vulnerable to remote code execution via XSLT injection when processing input from an untrusted source without validation. Users are recommended to upgrade to versions 10.1.0, 9.18.0 or 8.16.0, which fix this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-hhwc-gh8h-9rrp https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1271 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Wicket ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Wicket ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1271