https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:38:29 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-05980 cnvd-2017-05980 https://cve.radiocsirt.org/vuln/cnvd-2017-05980 https://cve.radiocsirt.org/vuln/euvd-2026-73537 EUVD-2026-73537 https://cve.radiocsirt.org/vuln/euvd-2026-73537 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5656 <p>Apache CXF&#39;s STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an identifer corresponding to a cached token for another user.</p> <p>Apache CXF&#39;s STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an identifer corresponding to a cached token for another user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-5656 https://cve.radiocsirt.org/vuln/ghsa-v936-x3j5-c76j <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-core</p> <p>Apache CXF&#39;s STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an identifer corresponding to a cached token for another user.</p> <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-core</p> <p>Apache CXF&#39;s STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an identifer corresponding to a cached token for another user.</p> https://cve.radiocsirt.org/vuln/ghsa-v936-x3j5-c76j https://cve.radiocsirt.org/vuln/gsd-2017-5656 gsd-2017-5656 https://cve.radiocsirt.org/vuln/gsd-2017-5656 https://cve.radiocsirt.org/vuln/rhsa-2017:1832 <p>bouncycastle: Information disclosure in GCMBlockCipher camel-jacksonxml: Unmarshalling operation are vulnerable to RCE Security: Improper handling of path parameters allows bypassing the security constraint hawtio: Proxy is sharing cookies among all the clients hawtio: information Disclosure flaws due to unsafe path traversal cxf: CXF OAuth2 Hawk and JOSE MAC Validation code are vulnerable to timing attacks camel-core: Validation component vulnerable to SSRF via remote DTDs and XXE cxf: CXF JAX-RS XML Security streaming clients do not validate that the service response was signed or encrypted cxf: CXF&#39;s STSClient uses a flawed way of caching tokens that are associated with delegation tokens logback: Serialization vulnerability in SocketServer and ServerSocketReceiver XStream: DoS when unmarshalling void type</p> <p>bouncycastle: Information disclosure in GCMBlockCipher camel-jacksonxml: Unmarshalling operation are vulnerable to RCE Security: Improper handling of path parameters allows bypassing the security constraint hawtio: Proxy is sharing cookies among all the clients hawtio: information Disclosure flaws due to unsafe path traversal cxf: CXF OAuth2 Hawk and JOSE MAC Validation code are vulnerable to timing attacks camel-core: Validation component vulnerable to SSRF via remote DTDs and XXE cxf: CXF JAX-RS XML Security streaming clients do not validate that the service response was signed or encrypted cxf: CXF&#39;s STSClient uses a flawed way of caching tokens that are associated with delegation tokens logback: Serialization vulnerability in SocketServer and ServerSocketReceiver XStream: DoS when unmarshalling void type</p> https://cve.radiocsirt.org/vuln/rhsa-2017:1832