https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 18:21:39 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-13086 cnvd-2018-13086 https://cve.radiocsirt.org/vuln/cnvd-2018-13086 https://cve.radiocsirt.org/vuln/euvd-2026-88533 EUVD-2026-88533 https://cve.radiocsirt.org/vuln/euvd-2026-88533 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10726 <p>The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitrary characters and a colon before a pathname, as demonstrated by a themes/Reference/aa:etc/passwd URI.</p> <p>The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitrary characters and a colon before a pathname, as demonstrated by a themes/Reference/aa:etc/passwd URI.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-10726 https://cve.radiocsirt.org/vuln/ghsa-4m9r-5gqp-7j82 <p><strong>Affected:</strong> Maven: org.dspace:dspace-xmlui</p> <p>The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitrary characters and a colon before a pathname, as demonstrated by a themes/Reference/aa:etc/passwd URI.</p> <p><strong>Affected:</strong> Maven: org.dspace:dspace-xmlui</p> <p>The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitrary characters and a colon before a pathname, as demonstrated by a themes/Reference/aa:etc/passwd URI.</p> https://cve.radiocsirt.org/vuln/ghsa-4m9r-5gqp-7j82 https://cve.radiocsirt.org/vuln/gsd-2016-10726 gsd-2016-10726 https://cve.radiocsirt.org/vuln/gsd-2016-10726