https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 16:21:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-06203 bdu:2022-06203 https://cve.radiocsirt.org/vuln/bdu:2022-06203 https://cve.radiocsirt.org/vuln/euvd-2026-110001 EUVD-2026-110001 https://cve.radiocsirt.org/vuln/euvd-2026-110001 https://cve.radiocsirt.org/vuln/fkie_cve-2012-0838 <p>Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field.</p> <p>Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-0838 https://cve.radiocsirt.org/vuln/ghsa-mwrx-hx6x-3hhv <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core, Maven: org.apache.struts.xwork:xwork-core</p> <p>Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field.</p> <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core, Maven: org.apache.struts.xwork:xwork-core</p> <p>Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field.</p> https://cve.radiocsirt.org/vuln/ghsa-mwrx-hx6x-3hhv https://cve.radiocsirt.org/vuln/gsd-2012-0838 gsd-2012-0838 https://cve.radiocsirt.org/vuln/gsd-2012-0838 https://cve.radiocsirt.org/vuln/jvndb-2012-000012 <p>Apache Struts 2 contains an arbitrary Java method execution vulnerability. Apache Struts 2 is a framework to create Java web applications. Apache Struts 2 contains an arbitrary Java method execution vulnerability due to improper conversion in OGNL expression if a non-string property is contained in action. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Apache Struts 2 contains an arbitrary Java method execution vulnerability. Apache Struts 2 is a framework to create Java web applications. Apache Struts 2 contains an arbitrary Java method execution vulnerability due to improper conversion in OGNL expression if a non-string property is contained in action. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2012-000012