Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:19:49 +0000 certfr-2025-avi-0228 — De multiples vulnérabilités ont été découvertes dans Spring Security. Elles permettent à un attaquant de provoquer un c… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0228 certfr-2025-avi-0228 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0228 EUVD-2026-273391 https://cve.radiocsirt.org/vuln/euvd-2026-273391 EUVD-2026-273391 https://cve.radiocsirt.org/vuln/euvd-2026-273391 fkie_cve-2025-22228 https://cve.radiocsirt.org/vuln/fkie_cve-2025-22228 <p>BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.</p> <p>BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-22228 GHSA-mg83-c7gq-rv5c — Spring Security Does Not Enforce Password Length https://cve.radiocsirt.org/vuln/ghsa-mg83-c7gq-rv5c <p><strong>Affected:</strong> Maven: org.springframework.security:spring-security-crypto</p> <p>BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.</p> <p><strong>Affected:</strong> Maven: org.springframework.security:spring-security-crypto</p> <p>BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.</p> https://cve.radiocsirt.org/vuln/ghsa-mg83-c7gq-rv5c NCSC-2026-0025 — Kwetsbaarheden verholpen in Oracle Financial Services https://cve.radiocsirt.org/vuln/ncsc-2026-0025 NCSC-2026-0025 https://cve.radiocsirt.org/vuln/ncsc-2026-0025 RHSA-2025:10092 — Red Hat Security Advisory: Red Hat Product OCP Tools 4.18 OpenShift Jenkins security update https://cve.radiocsirt.org/vuln/rhsa-2025:10092 <p>json-smart: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370) jetty-http2-common: Jetty HTTP/2 Header List Size Vulnerability spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError</p> <p>json-smart: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370) jetty-http2-common: Jetty HTTP/2 Header List Size Vulnerability spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError</p> https://cve.radiocsirt.org/vuln/rhsa-2025:10092 WID-SEC-W-2025-0602 — VMware Tanzu Spring Security: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0602 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Security ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Security ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0602