Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 16:24:06 +0000 cnvd-2017-10829 https://cve.radiocsirt.org/vuln/cnvd-2017-10829 cnvd-2017-10829 https://cve.radiocsirt.org/vuln/cnvd-2017-10829 EUVD-2026-72752 https://cve.radiocsirt.org/vuln/euvd-2026-72752 EUVD-2026-72752 https://cve.radiocsirt.org/vuln/euvd-2026-72752 fkie_cve-2017-3199 https://cve.radiocsirt.org/vuln/fkie_cve-2017-3199 <p>The Java implementation of GraniteDS, version 3.1.1.GA, AMF3 deserializers derives class instances from java.io.Externalizable rather than the AMF3 specification&#39;s recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized.</p> <p>The Java implementation of GraniteDS, version 3.1.1.GA, AMF3 deserializers derives class instances from java.io.Externalizable rather than the AMF3 specification&#39;s recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-3199 GHSA-8m35-r25c-qr56 — GraniteDS Insecure Deserialization https://cve.radiocsirt.org/vuln/ghsa-8m35-r25c-qr56 <p><strong>Affected:</strong> Maven: org.graniteds:granite-core</p> <p>The Java implementation of GraniteDS, version 3.1.1.GA, AMF3 deserializers derives class instances from java.io.Externalizable rather than the AMF3 specification&#39;s recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized.</p> <p><strong>Affected:</strong> Maven: org.graniteds:granite-core</p> <p>The Java implementation of GraniteDS, version 3.1.1.GA, AMF3 deserializers derives class instances from java.io.Externalizable rather than the AMF3 specification&#39;s recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized.</p> https://cve.radiocsirt.org/vuln/ghsa-8m35-r25c-qr56 gsd-2017-3199 https://cve.radiocsirt.org/vuln/gsd-2017-3199 gsd-2017-3199 https://cve.radiocsirt.org/vuln/gsd-2017-3199