https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 10:16:13 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-05632 cnvd-2015-05632 https://cve.radiocsirt.org/vuln/cnvd-2015-05632 https://cve.radiocsirt.org/vuln/euvd-2026-98016 EUVD-2026-98016 https://cve.radiocsirt.org/vuln/euvd-2026-98016 https://cve.radiocsirt.org/vuln/fkie_cve-2014-1972 <p>Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.</p> <p>Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-1972 https://cve.radiocsirt.org/vuln/ghsa-c438-8cvq-pxxx <p><strong>Affected:</strong> Maven: org.apache.tapestry:tapestry-core</p> <p>Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.</p> <p><strong>Affected:</strong> Maven: org.apache.tapestry:tapestry-core</p> <p>Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.</p> https://cve.radiocsirt.org/vuln/ghsa-c438-8cvq-pxxx https://cve.radiocsirt.org/vuln/gsd-2014-1972 gsd-2014-1972 https://cve.radiocsirt.org/vuln/gsd-2014-1972 https://cve.radiocsirt.org/vuln/jvndb-2015-000118 <p>Apache Tapestry contains a vulnerability where it may deserialize untrusted data. Apache Tapestry is a framework for creating Java web applications. Apache Tapestry contains an interface where client side serialized data sent to the server is deserialized after it is received by the server. This data serialization / deserialization process does not contain data validation. Therefore, if the serialized data is altered, the server will deserailze data without validating the data (CWE-502). Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Apache Tapestry contains a vulnerability where it may deserialize untrusted data. Apache Tapestry is a framework for creating Java web applications. Apache Tapestry contains an interface where client side serialized data sent to the server is deserialized after it is received by the server. This data serialization / deserialization process does not contain data validation. Therefore, if the serialized data is altered, the server will deserailze data without validating the data (CWE-502). Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2015-000118