https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 17:52:05 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-01110 bdu:2020-01110 https://cve.radiocsirt.org/vuln/bdu:2020-01110 https://cve.radiocsirt.org/vuln/certfr-2017-avi-115 certfr-2017-avi-115 https://cve.radiocsirt.org/vuln/certfr-2017-avi-115 https://cve.radiocsirt.org/vuln/cnvd-2017-04657 cnvd-2017-04657 https://cve.radiocsirt.org/vuln/cnvd-2017-04657 https://cve.radiocsirt.org/vuln/euvd-2026-173131 EUVD-2026-173131 https://cve.radiocsirt.org/vuln/euvd-2026-173131 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5641 <p>Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by default. During the deserialization process code is executed that for several known types has undesired side-effects. Other, unknown types may also exhibit such behaviors. One vector in the Java standard library exists that allows an attacker to trigger possibly further exploitable Java deserialization of untrusted data. Other known vectors in third party libraries can be used to trigger remote code execution.</p> <p>Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by default. During the deserialization process code is executed that for several known types has undesired side-effects. Other, unknown types may also exhibit such behaviors. One vector in the Java standard library exists that allows an attacker to trigger possibly further exploitable Java deserialization of untrusted data. Other known vectors in third party libraries can be used to trigger remote code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-5641 https://cve.radiocsirt.org/vuln/ghsa-w8v7-prhw-xjpw <p><strong>Affected:</strong> Maven: org.apache.flex.blazeds:flex-messaging-core, Maven: org.apache.flex.blazeds:flex-messaging-remoting</p> <p>Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by default. During the deserialization process code is executed that for several known types has undesired side-effects. Other, unknown types may also exhibit such behaviors. One vector in the Java standard library exists that allows an attacker to trigger possibly further exploitable Java deserialization of untrusted data. Other known vectors in third party libraries can be used to trigger remote code execution.</p> <p><strong>Affected:</strong> Maven: org.apache.flex.blazeds:flex-messaging-core, Maven: org.apache.flex.blazeds:flex-messaging-remoting</p> <p>Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by default. During the deserialization process code is executed that for several known types has undesired side-effects. Other, unknown types may also exhibit such behaviors. One vector in the Java standard library exists that allows an attacker to trigger possibly further exploitable Java deserialization of untrusted data. Other known vectors in third party libraries can be used to trigger remote code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-w8v7-prhw-xjpw https://cve.radiocsirt.org/vuln/gsd-2017-5641 gsd-2017-5641 https://cve.radiocsirt.org/vuln/gsd-2017-5641