Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:04:01 +0000 certfr-2026-avi-0705 — De multiples vulnérabilités ont été découvertes dans les produits Spring. Certaines d'entre elles permettent à un attaq… https://cve.radiocsirt.org/vuln/certfr-2026-avi-0705 certfr-2026-avi-0705 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0705 CLEANSTART-2026-EX93158 — Security fix for CVE-2026-41720 applied in: apache-hive 4.1.0-r7, apache-hive 4.2.0-r11 https://cve.radiocsirt.org/vuln/cleanstart-2026-ex93158 <p><strong>Affected:</strong> CleanStart: apache-hive</p> <p>CVE-2026-41720 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: apache-hive</p> <p>CVE-2026-41720 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ex93158 EUVD-2026-329712 https://cve.radiocsirt.org/vuln/euvd-2026-329712 EUVD-2026-329712 https://cve.radiocsirt.org/vuln/euvd-2026-329712 fkie_cve-2026-41720 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41720 <p>Spring LDAP&#39;s DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username is paired with an empty or null password.</p> <p>Affected versions: Spring LDAP 2.4.0 through 2.4.4; 3.2.0 through 3.2.17; 3.3.0 through 3.3.7; 4.0.0 through 4.0.3.</p> <p>Spring LDAP&#39;s DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username is paired with an empty or null password.</p> <p>Affected versions: Spring LDAP 2.4.0 through 2.4.4; 3.2.0 through 3.2.17; 3.3.0 through 3.3.7; 4.0.0 through 4.0.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-41720 GHSA-jrv5-8w28-4265 — Spring LDAP has Authentication Bypass with Empty Password https://cve.radiocsirt.org/vuln/ghsa-jrv5-8w28-4265 <p><strong>Affected:</strong> Maven: org.springframework.ldap:spring-ldap-core</p> <p>Spring LDAP&#39;s DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username is paired with an empty or null password.</p> <p>Affected versions: Spring LDAP 2.4.0 through 2.4.4; 3.2.0 through 3.2.17; 3.3.0 through 3.3.7; 4.0.0 through 4.0.3.</p> <p><strong>Affected:</strong> Maven: org.springframework.ldap:spring-ldap-core</p> <p>Spring LDAP&#39;s DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username is paired with an empty or null password.</p> <p>Affected versions: Spring LDAP 2.4.0 through 2.4.4; 3.2.0 through 3.2.17; 3.3.0 through 3.3.7; 4.0.0 through 4.0.3.</p> https://cve.radiocsirt.org/vuln/ghsa-jrv5-8w28-4265