https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:51:10 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-06703 cnvd-2018-06703 https://cve.radiocsirt.org/vuln/cnvd-2018-06703 https://cve.radiocsirt.org/vuln/euvd-2026-178323 EUVD-2026-178323 https://cve.radiocsirt.org/vuln/euvd-2026-178323 https://cve.radiocsirt.org/vuln/fkie_cve-2016-8750 <p>Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service.</p> <p>Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-8750 https://cve.radiocsirt.org/vuln/ghsa-chj8-5xgw-wcvj <p><strong>Affected:</strong> Maven: org.apache.karaf:apache-karaf</p> <p>Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service.</p> <p><strong>Affected:</strong> Maven: org.apache.karaf:apache-karaf</p> <p>Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-chj8-5xgw-wcvj https://cve.radiocsirt.org/vuln/gsd-2016-8750 gsd-2016-8750 https://cve.radiocsirt.org/vuln/gsd-2016-8750 https://cve.radiocsirt.org/vuln/rhsa-2018:1322 <p>karaf: LDAP injection in LDAPLoginModule undertow: HTTP Request smuggling vulnerability (incomplete fix of CVE-2017-2666) undertow: improper whitespace parsing leading to potential HTTP request smuggling poi: Parsing of multiple file types can cause a denial of service via infinite loop or out of memory exception plexus-utils: Mishandled strings in Commandline class allow for command injection</p> <p>karaf: LDAP injection in LDAPLoginModule undertow: HTTP Request smuggling vulnerability (incomplete fix of CVE-2017-2666) undertow: improper whitespace parsing leading to potential HTTP request smuggling poi: Parsing of multiple file types can cause a denial of service via infinite loop or out of memory exception plexus-utils: Mishandled strings in Commandline class allow for command injection</p> https://cve.radiocsirt.org/vuln/rhsa-2018:1322