https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:06:16 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-12099 bdu:2015-12099 https://cve.radiocsirt.org/vuln/bdu:2015-12099 https://cve.radiocsirt.org/vuln/certfr-2015-avi-484 certfr-2015-avi-484 https://cve.radiocsirt.org/vuln/certfr-2015-avi-484 https://cve.radiocsirt.org/vuln/cnvd-2015-07707 cnvd-2015-07707 https://cve.radiocsirt.org/vuln/cnvd-2015-07707 https://cve.radiocsirt.org/vuln/euvd-2026-256414 EUVD-2026-256414 https://cve.radiocsirt.org/vuln/euvd-2026-256414 https://cve.radiocsirt.org/vuln/fkie_cve-2015-4852 <p>The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.</p> <p>The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-4852 https://cve.radiocsirt.org/vuln/ghsa-7r6v-mxc2-pg49 <p>The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.</p> <p>The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.</p> https://cve.radiocsirt.org/vuln/ghsa-7r6v-mxc2-pg49 https://cve.radiocsirt.org/vuln/gsd-2015-4852 gsd-2015-4852 https://cve.radiocsirt.org/vuln/gsd-2015-4852 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10617-1 <p>apache-commons-beanutils-1.9.4-3.7 on GA media</p> <p>apache-commons-beanutils-1.9.4-3.7 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10617-1 https://cve.radiocsirt.org/vuln/suse-su-2025:02056-1 <p>Security update for apache-commons-beanutils</p> <p>Security update for apache-commons-beanutils</p> https://cve.radiocsirt.org/vuln/suse-su-2025:02056-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-4852 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libcommons-collections3-java, Ubuntu:Pro:16.04:LTS: openjdk-8, Ubuntu:Pro:18.04:LTS: openjdk-8, Ubuntu:Pro:20.04:LTS: openjdk-8, Ubuntu:22.04:LTS: openjdk-8, Ubuntu:24.04:LTS: openjdk-8</p> <p>The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libcommons-collections3-java, Ubuntu:Pro:16.04:LTS: openjdk-8, Ubuntu:Pro:18.04:LTS: openjdk-8, Ubuntu:Pro:20.04:LTS: openjdk-8, Ubuntu:22.04:LTS: openjdk-8, Ubuntu:24.04:LTS: openjdk-8</p> <p>The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-4852 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375