https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:19:32 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0715 certfr-2024-avi-0715 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0715 https://cve.radiocsirt.org/vuln/euvd-2026-225735 EUVD-2026-225735 https://cve.radiocsirt.org/vuln/euvd-2026-225735 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38807 <p>Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where content that appears to have been signed by one signer has, in fact, been signed by another.</p> <p>Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where content that appears to have been signed by one signer has, in fact, been signed by another.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-38807 https://cve.radiocsirt.org/vuln/ghsa-7cj3-x93g-gj76 <p><strong>Affected:</strong> Maven: org.springframework.boot:spring-boot-loader, Maven: org.springframework.boot:spring-boot-loader-classic</p> <p>Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where content that appears to have been signed by one signer has, in fact, been signed by another.</p> <p><strong>Affected:</strong> Maven: org.springframework.boot:spring-boot-loader, Maven: org.springframework.boot:spring-boot-loader-classic</p> <p>Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where content that appears to have been signed by one signer has, in fact, been signed by another.</p> https://cve.radiocsirt.org/vuln/ghsa-7cj3-x93g-gj76 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38807 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java</p> <p>Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where content that appears to have been signed by one signer has, in fact, been signed by another.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java</p> <p>Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where content that appears to have been signed by one signer has, in fact, been signed by another.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38807 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1916 <p>Ein lokaler Angreifer kann eine Schwachstelle in VMware Tanzu Spring Boot ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in VMware Tanzu Spring Boot ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1916