Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:25:41 +0000 certfr-2014-avi-096 — Une vulnérabilité a été corrigée dans <span class="textit">IBM Rational Tester</span>. Elle permet à un attaquant de pr… https://cve.radiocsirt.org/vuln/certfr-2014-avi-096 certfr-2014-avi-096 https://cve.radiocsirt.org/vuln/certfr-2014-avi-096 EUVD-2026-108625 https://cve.radiocsirt.org/vuln/euvd-2026-108625 EUVD-2026-108625 https://cve.radiocsirt.org/vuln/euvd-2026-108625 fkie_cve-2013-6440 https://cve.radiocsirt.org/vuln/fkie_cve-2013-6440 <p>The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.</p> <p>The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-6440 GHSA-v723-58jv-2qc4 — Exposure of Sensitive Information to an Unauthorized Actor in OpenSAML https://cve.radiocsirt.org/vuln/ghsa-v723-58jv-2qc4 <p><strong>Affected:</strong> Maven: org.opensaml:opensaml</p> <p>The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.</p> <p><strong>Affected:</strong> Maven: org.opensaml:opensaml</p> <p>The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.</p> https://cve.radiocsirt.org/vuln/ghsa-v723-58jv-2qc4 gsd-2013-6440 https://cve.radiocsirt.org/vuln/gsd-2013-6440 gsd-2013-6440 https://cve.radiocsirt.org/vuln/gsd-2013-6440 RHSA-2014:0170 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.1 update https://cve.radiocsirt.org/vuln/rhsa-2014:0170 <p>Java: Java XML Signature DoS Attack Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter jboss-as-server: Unchecked access to MSC Service Registry under JSM</p> <p>Java: Java XML Signature DoS Attack Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter jboss-as-server: Unchecked access to MSC Service Registry under JSM</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0170