https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:20:46 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-113176 EUVD-2026-113176 https://cve.radiocsirt.org/vuln/euvd-2026-113176 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5575 <p>Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force CXF to use weaker cryptographic algorithms than intended and makes it easier to decrypt communications, aka &#34;XML Encryption backwards compatibility attack.&#34;</p> <p>Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force CXF to use weaker cryptographic algorithms than intended and makes it easier to decrypt communications, aka &#34;XML Encryption backwards compatibility attack.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-5575 https://cve.radiocsirt.org/vuln/ghsa-7v5v-9v8r-w864 <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-rt-transports-http</p> <p>Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force CXF to use weaker cryptographic algorithms than intended and makes it easier to decrypt communications, aka &#34;XML Encryption backwards compatibility attack.&#34;</p> <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-rt-transports-http</p> <p>Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force CXF to use weaker cryptographic algorithms than intended and makes it easier to decrypt communications, aka &#34;XML Encryption backwards compatibility attack.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-7v5v-9v8r-w864 https://cve.radiocsirt.org/vuln/gsd-2012-5575 gsd-2012-5575 https://cve.radiocsirt.org/vuln/gsd-2012-5575 https://cve.radiocsirt.org/vuln/rhsa-2013:0833 <p>Web: jsessionid exposed via encoded url when using cookie based session tracking JBoss: custom authorization module implementations shared between applications apache-cxf: XML encryption backwards compatibility attacks openssl: DoS due to improper handling of OCSP response verification SSL/TLS: CBC padding timing attack (lucky-13) Installer: Generated auto-install xml is world readable tomcat: Session fixation in form authenticator</p> <p>Web: jsessionid exposed via encoded url when using cookie based session tracking JBoss: custom authorization module implementations shared between applications apache-cxf: XML encryption backwards compatibility attacks openssl: DoS due to improper handling of OCSP response verification SSL/TLS: CBC padding timing attack (lucky-13) Installer: Generated auto-install xml is world readable tomcat: Session fixation in form authenticator</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0833