https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:23:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-07817 bdu:2024-07817 https://cve.radiocsirt.org/vuln/bdu:2024-07817 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0059 certfr-2025-avi-0059 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0059 https://cve.radiocsirt.org/vuln/cleanstart-2026-gz54612 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: apache-nifi</p> <p>Multiple security vulnerabilities affect the apache-nifi package. In Spring Security, versions 5. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: apache-nifi</p> <p>Multiple security vulnerabilities affect the apache-nifi package. In Spring Security, versions 5. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-gz54612 https://cve.radiocsirt.org/vuln/euvd-2026-196481 EUVD-2026-196481 https://cve.radiocsirt.org/vuln/euvd-2026-196481 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47561 <p>Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.</p> <p>Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-47561 https://cve.radiocsirt.org/vuln/ghsa-r7pg-v2c8-mfg3 <p><strong>Affected:</strong> Maven: org.apache.avro:avro</p> <p>Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue.</p> <p><strong>Affected:</strong> Maven: org.apache.avro:avro</p> <p>Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-r7pg-v2c8-mfg3 https://cve.radiocsirt.org/vuln/ncsc-2026-0258 NCSC-2026-0258 https://cve.radiocsirt.org/vuln/ncsc-2026-0258 https://cve.radiocsirt.org/vuln/oesa-2024-2227 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: avro, openEuler:22.03-LTS-SP3: avro, openEuler:20.03-LTS-SP4: avro, openEuler:22.03-LTS-SP1: avro, openEuler:24.03-LTS: avro</p> <p>Apache Avro is a data serialization system. Security Fix(es): Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.(CVE-2024-47561)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: avro, openEuler:22.03-LTS-SP3: avro, openEuler:20.03-LTS-SP4: avro, openEuler:22.03-LTS-SP1: avro, openEuler:24.03-LTS: avro</p> <p>Apache Avro is a data serialization system. Security Fix(es): Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.(CVE-2024-47561)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2227 https://cve.radiocsirt.org/vuln/rhsa-2024:10207 <p>undertow: client side invocation timeout raised when calling over HTTP2 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender h2: Loading of custom classes from remote servers through JNDI log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender log4j: Unsafe deserialization flaw in Chainsaw log viewer OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) hsqldb: Untrusted input may lead to RCE attack CXF: SSRF Vulnerability eap-7: heap exhaustion via deserialization xnio: StackOverflowException when the chain of notifier states becomes problematically big log4j1-socketappender: DoS via hashmap logging apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding apache-avro: Schema parsing may trigger Remote Code Execution (RCE)</p> <p>undertow: client side invocation timeout raised when calling over HTTP2 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender h2: Loading of custom classes from remote servers through JNDI log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender log4j: Unsafe deserialization flaw in Chainsaw log viewer OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) hsqldb: Untrusted input may lead to RCE attack CXF: SSRF Vulnerability eap-7: heap exhaustion via deserialization xnio: StackOverflowException when the chain of notifier states becomes problematically big log4j1-socketappender: DoS via hashmap logging apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding apache-avro: Schema parsing may trigger Remote Code Execution (RCE)</p> https://cve.radiocsirt.org/vuln/rhsa-2024:10207 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3111 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3111