Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 17:48:21 +0000 cnvd-2016-07552 https://cve.radiocsirt.org/vuln/cnvd-2016-07552 cnvd-2016-07552 https://cve.radiocsirt.org/vuln/cnvd-2016-07552 EUVD-2026-84444 https://cve.radiocsirt.org/vuln/euvd-2026-84444 EUVD-2026-84444 https://cve.radiocsirt.org/vuln/euvd-2026-84444 fkie_cve-2016-4464 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4464 <p>The application plugins in Apache CXF Fediz 1.2.x before 1.2.3 and 1.3.x before 1.3.1 do not match SAML AudienceRestriction values against configured audience URIs, which might allow remote attackers to have bypass intended restrictions and have unspecified other impact via a crafted SAML token with a trusted signature.</p> <p>The application plugins in Apache CXF Fediz 1.2.x before 1.2.3 and 1.3.x before 1.3.1 do not match SAML AudienceRestriction values against configured audience URIs, which might allow remote attackers to have bypass intended restrictions and have unspecified other impact via a crafted SAML token with a trusted signature.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-4464 GHSA-qpwj-mvv7-v3m9 — High severity vulnerability that affects org.apache.cxf.fediz:fediz-spring and org.apache.cxf.fediz:fediz-spring2 https://cve.radiocsirt.org/vuln/ghsa-qpwj-mvv7-v3m9 <p><strong>Affected:</strong> Maven: org.apache.cxf.fediz:fediz-spring, Maven: org.apache.cxf.fediz:fediz-spring2</p> <p>The application plugins in Apache CXF Fediz 1.2.x before 1.2.3 and 1.3.x before 1.3.1 do not match SAML AudienceRestriction values against configured audience URIs, which might allow remote attackers to have bypass intended restrictions and have unspecified other impact via a crafted SAML token with a trusted signature.</p> <p><strong>Affected:</strong> Maven: org.apache.cxf.fediz:fediz-spring, Maven: org.apache.cxf.fediz:fediz-spring2</p> <p>The application plugins in Apache CXF Fediz 1.2.x before 1.2.3 and 1.3.x before 1.3.1 do not match SAML AudienceRestriction values against configured audience URIs, which might allow remote attackers to have bypass intended restrictions and have unspecified other impact via a crafted SAML token with a trusted signature.</p> https://cve.radiocsirt.org/vuln/ghsa-qpwj-mvv7-v3m9 gsd-2016-4464 https://cve.radiocsirt.org/vuln/gsd-2016-4464 gsd-2016-4464 https://cve.radiocsirt.org/vuln/gsd-2016-4464