https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:01:08 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0215 certfr-2025-avi-0215 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0215 https://cve.radiocsirt.org/vuln/cnvd-2024-41665 cnvd-2024-41665 https://cve.radiocsirt.org/vuln/cnvd-2024-41665 https://cve.radiocsirt.org/vuln/euvd-2026-206996 EUVD-2026-206996 https://cve.radiocsirt.org/vuln/euvd-2026-206996 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45772 <p>Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator.</p> <p>This issue affects Apache Lucene&#39;s replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected.</p> <p>Users are recommended to upgrade to version 9.12.0, which fixes the issue.</p> <p>The deserialization can only be triggered if users actively deploy an network-accessible implementation and a corresponding client using a HTTP library that uses the API (e.g., a custom servlet and HTTPClient). Java serialization filters (such as -Djdk.serialFilter=&#39;!*&#39; on the commandline) can mitigate the issue on vulnerable versions without impacting functionality.</p> <p>Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator.</p> <p>This issue affects Apache Lucene&#39;s replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected.</p> <p>Users are recommended to upgrade to version 9.12.0, which fixes the issue.</p> <p>The deserialization can only be triggered if users actively deploy an network-accessible implementation and a corresponding client using a HTTP library that uses the API (e.g., a custom servlet and HTTPClient). Java serialization filters (such as -Djdk.serialFilter=&#39;!*&#39; on the commandline) can mitigate the issue on vulnerable versions without impacting functionality.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45772 https://cve.radiocsirt.org/vuln/ghsa-g643-xq6w-r67c <p><strong>Affected:</strong> Maven: org.apache.lucene:lucene-replicator</p> <p>This issue affects Apache Lucene&#39;s replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected.</p> <p>Users are recommended to upgrade to version 9.12.0, which fixes the issue.</p> <p>The deserialization can only be triggered if users actively deploy an network-accessible implementation and a corresponding client using a HTTP library that uses the API (e.g., a custom servlet and HTTPClient). Java serialization filters (such as -Djdk.serialFilter=&#39;!*&#39; on the commandline) can mitigate the issue on vulnerable versions without impacting functionality.</p> <p><strong>Affected:</strong> Maven: org.apache.lucene:lucene-replicator</p> <p>This issue affects Apache Lucene&#39;s replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected.</p> <p>Users are recommended to upgrade to version 9.12.0, which fixes the issue.</p> <p>The deserialization can only be triggered if users actively deploy an network-accessible implementation and a corresponding client using a HTTP library that uses the API (e.g., a custom servlet and HTTPClient). Java serialization filters (such as -Djdk.serialFilter=&#39;!*&#39; on the commandline) can mitigate the issue on vulnerable versions without impacting functionality.</p> https://cve.radiocsirt.org/vuln/ghsa-g643-xq6w-r67c https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3049 <p>Ein Angreifer kann eine Schwachstelle in Apache Lucene Replicator ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann eine Schwachstelle in Apache Lucene Replicator ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3049