https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:56:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-06636 bdu:2022-06636 https://cve.radiocsirt.org/vuln/bdu:2022-06636 https://cve.radiocsirt.org/vuln/certa-2013-avi-575 certa-2013-avi-575 https://cve.radiocsirt.org/vuln/certa-2013-avi-575 https://cve.radiocsirt.org/vuln/euvd-2026-106033 EUVD-2026-106033 https://cve.radiocsirt.org/vuln/euvd-2026-106033 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2172 <p>jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak &#34;canonicalization algorithm to apply to the SignedInfo part of the Signature.&#34;</p> <p>jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak &#34;canonicalization algorithm to apply to the SignedInfo part of the Signature.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-2172 https://cve.radiocsirt.org/vuln/ghsa-r237-w2w6-jq3p <p><strong>Affected:</strong> Maven: org.apache.santuario:xmlsec</p> <p>`jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java` in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak &#34;canonicalization algorithm to apply to the SignedInfo part of the Signature.&#34;</p> <p><strong>Affected:</strong> Maven: org.apache.santuario:xmlsec</p> <p>`jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java` in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak &#34;canonicalization algorithm to apply to the SignedInfo part of the Signature.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-r237-w2w6-jq3p https://cve.radiocsirt.org/vuln/gsd-2013-2172 gsd-2013-2172 https://cve.radiocsirt.org/vuln/gsd-2013-2172 https://cve.radiocsirt.org/vuln/rhsa-2013:1207 <p>httpd: multiple XSS flaws due to unescaped hostnames httpd: XSS flaw in mod_proxy_balancer manager interface httpd: mod_rewrite allows terminal escape sequences to be written to the log file httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav PicketBox: Insecure storage of masked passwords Java: XML signature spoofing JGroups: Authentication via cached credentials Bayeux: Reflected Cross-Site Scripting (XSS)</p> <p>httpd: multiple XSS flaws due to unescaped hostnames httpd: XSS flaw in mod_proxy_balancer manager interface httpd: mod_rewrite allows terminal escape sequences to be written to the log file httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav PicketBox: Insecure storage of masked passwords Java: XML signature spoofing JGroups: Authentication via cached credentials Bayeux: Reflected Cross-Site Scripting (XSS)</p> https://cve.radiocsirt.org/vuln/rhsa-2013:1207 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-2172 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libxml-security-java</p> <p>jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak &#34;canonicalization algorithm to apply to the SignedInfo part of the Signature.&#34;</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libxml-security-java</p> <p>jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak &#34;canonicalization algorithm to apply to the SignedInfo part of the Signature.&#34;</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-2172 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1738 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1738