https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:54:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-11869 bdu:2026-11869 https://cve.radiocsirt.org/vuln/bdu:2026-11869 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0810 certfr-2026-avi-0810 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0810 https://cve.radiocsirt.org/vuln/cleanstart-2026-ce10830 <p><strong>Affected:</strong> CleanStart: wildfly</p> <p>Security vulnerability affects the wildfly package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: wildfly</p> <p>Security vulnerability affects the wildfly package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ce10830 https://cve.radiocsirt.org/vuln/euvd-2026-308198 EUVD-2026-308198 https://cve.radiocsirt.org/vuln/euvd-2026-308198 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42402 <p>Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization. Specially crafted WS-Policy documents can trigger an exponential Cartesian cross-product expansion during the normalization process, causing unbounded memory allocation that exhausts the JVM heap. This occurs when the normalization process generates an excessive number of policy alternatives without bounds, leading to runtime memory exhaustion.</p> <p>Users should upgrade to 3.2.2 which limits the maximum number of normalized policy alternatives.</p> <p>Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization. Specially crafted WS-Policy documents can trigger an exponential Cartesian cross-product expansion during the normalization process, causing unbounded memory allocation that exhausts the JVM heap. This occurs when the normalization process generates an excessive number of policy alternatives without bounds, leading to runtime memory exhaustion.</p> <p>Users should upgrade to 3.2.2 which limits the maximum number of normalized policy alternatives.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-42402 https://cve.radiocsirt.org/vuln/ghsa-g36m-9g3m-2vmp <p><strong>Affected:</strong> Maven: org.apache.neethi:neethi</p> <p>Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization. Specially crafted WS-Policy documents can trigger an exponential Cartesian cross-product expansion during the normalization process, causing unbounded memory allocation that exhausts the JVM heap. This occurs when the normalization process generates an excessive number of policy alternatives without bounds, leading to runtime memory exhaustion.</p> <p>Users should upgrade to 3.2.2 which limits the maximum number of normalized policy alternatives.</p> <p><strong>Affected:</strong> Maven: org.apache.neethi:neethi</p> <p>Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization. Specially crafted WS-Policy documents can trigger an exponential Cartesian cross-product expansion during the normalization process, causing unbounded memory allocation that exhausts the JVM heap. This occurs when the normalization process generates an excessive number of policy alternatives without bounds, leading to runtime memory exhaustion.</p> <p>Users should upgrade to 3.2.2 which limits the maximum number of normalized policy alternatives.</p> https://cve.radiocsirt.org/vuln/ghsa-g36m-9g3m-2vmp https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2050 <p>Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty und IBM WebSphere Application Server ausnutzen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty und IBM WebSphere Application Server ausnutzen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2050