https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:27:47 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-03952 cnvd-2016-03952 https://cve.radiocsirt.org/vuln/cnvd-2016-03952 https://cve.radiocsirt.org/vuln/euvd-2026-91689 EUVD-2026-91689 https://cve.radiocsirt.org/vuln/euvd-2026-91689 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3192 <p>Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file.</p> <p>Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-3192 https://cve.radiocsirt.org/vuln/ghsa-6v7w-535j-rq5m <p><strong>Affected:</strong> Maven: org.springframework:spring-web</p> <p>Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file.</p> <p><strong>Affected:</strong> Maven: org.springframework:spring-web</p> <p>Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file.</p> https://cve.radiocsirt.org/vuln/ghsa-6v7w-535j-rq5m https://cve.radiocsirt.org/vuln/gsd-2015-3192 gsd-2015-3192 https://cve.radiocsirt.org/vuln/gsd-2015-3192 https://cve.radiocsirt.org/vuln/rhsa-2016:1218 <p>Framework: denial-of-service attack with XML input</p> <p>Framework: denial-of-service attack with XML input</p> https://cve.radiocsirt.org/vuln/rhsa-2016:1218 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3192 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java</p> <p>Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java</p> <p>Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3192 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3616 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Fuse und Red Hat JBoss A-MQ ausnutzen, um einen Denial of Service Angriff durchzuführen, Code mit den Privilegien des angegriffenen Dienstes zur Ausführung bringen, vertrauliche Daten einzusehen, Informationen zu manipulieren oder Sicherheitsmechanismen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Fuse und Red Hat JBoss A-MQ ausnutzen, um einen Denial of Service Angriff durchzuführen, Code mit den Privilegien des angegriffenen Dienstes zur Ausführung bringen, vertrauliche Daten einzusehen, Informationen zu manipulieren oder Sicherheitsmechanismen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3616