Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 10:16:40 +0000 bdu:2022-05406 https://cve.radiocsirt.org/vuln/bdu:2022-05406 bdu:2022-05406 https://cve.radiocsirt.org/vuln/bdu:2022-05406 certa-2010-avi-387 — Des vulnérabilités concernant les composants d'<span class="textit">Apache Geronimo</span> permettent notamment à un ut… https://cve.radiocsirt.org/vuln/certa-2010-avi-387 certa-2010-avi-387 https://cve.radiocsirt.org/vuln/certa-2010-avi-387 EUVD-2026-118571 https://cve.radiocsirt.org/vuln/euvd-2026-118571 EUVD-2026-118571 https://cve.radiocsirt.org/vuln/euvd-2026-118571 fkie_cve-2010-1622 https://cve.radiocsirt.org/vuln/fkie_cve-2010-1622 <p>SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.</p> <p>SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-1622 GHSA-vpr3-f594-mg5g — Improper Control of Generation of Code ('Code Injection') in Spring Framework https://cve.radiocsirt.org/vuln/ghsa-vpr3-f594-mg5g <p><strong>Affected:</strong> Maven: org.springframework:spring</p> <p>SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing `class.classLoader.URLs[0]=jar:` followed by a URL of a crafted .jar file.</p> <p><strong>Affected:</strong> Maven: org.springframework:spring</p> <p>SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing `class.classLoader.URLs[0]=jar:` followed by a URL of a crafted .jar file.</p> https://cve.radiocsirt.org/vuln/ghsa-vpr3-f594-mg5g gsd-2010-1622 https://cve.radiocsirt.org/vuln/gsd-2010-1622 gsd-2010-1622 https://cve.radiocsirt.org/vuln/gsd-2010-1622 RHSA-2011:0175 — Red Hat Security Advisory: JBoss Web Framework Kit 1.0.0 removal https://cve.radiocsirt.org/vuln/rhsa-2011:0175 <p>3.0.3): Arbitrary Java code execution via an HTTP request containing a specially-crafted .jar file</p> <p>3.0.3): Arbitrary Java code execution via an HTTP request containing a specially-crafted .jar file</p> https://cve.radiocsirt.org/vuln/rhsa-2011:0175