https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 23:41:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-48375 EUVD-2026-48375 https://cve.radiocsirt.org/vuln/euvd-2026-48375 https://cve.radiocsirt.org/vuln/fkie_cve-2019-0189 <p>The java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is exposed by the &#34;webtools/control/httpService&#34; URL, and uses Java deserialization to perform code execution. In the HttpEngine, the value of the request parameter &#34;serviceContext&#34; is passed to the &#34;deserialize&#34; method of &#34;XmlSerializer&#34;. Apache Ofbiz is affected via two different dependencies: &#34;commons-beanutils&#34; and an out-dated version of &#34;commons-fileupload&#34; Mitigation: Upgrade to 16.11.06 or manually apply the commits from OFBIZ-10770 and OFBIZ-10837 on branch 16</p> <p>The java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is exposed by the &#34;webtools/control/httpService&#34; URL, and uses Java deserialization to perform code execution. In the HttpEngine, the value of the request parameter &#34;serviceContext&#34; is passed to the &#34;deserialize&#34; method of &#34;XmlSerializer&#34;. Apache Ofbiz is affected via two different dependencies: &#34;commons-beanutils&#34; and an out-dated version of &#34;commons-fileupload&#34; Mitigation: Upgrade to 16.11.06 or manually apply the commits from OFBIZ-10770 and OFBIZ-10837 on branch 16</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-0189 https://cve.radiocsirt.org/vuln/ghsa-7f6q-4x5x-p74v <p>The java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is exposed by the &#34;webtools/control/httpService&#34; URL, and uses Java deserialization to perform code execution. In the HttpEngine, the value of the request parameter &#34;serviceContext&#34; is passed to the &#34;deserialize&#34; method of &#34;XmlSerializer&#34;. Apache Ofbiz is affected via two different dependencies: &#34;commons-beanutils&#34; and an out-dated version of &#34;commons-fileupload&#34; Mitigation: Upgrade to 16.11.06 or manually apply the commits from OFBIZ-10770 and OFBIZ-10837 on branch 16</p> <p>The java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is exposed by the &#34;webtools/control/httpService&#34; URL, and uses Java deserialization to perform code execution. In the HttpEngine, the value of the request parameter &#34;serviceContext&#34; is passed to the &#34;deserialize&#34; method of &#34;XmlSerializer&#34;. Apache Ofbiz is affected via two different dependencies: &#34;commons-beanutils&#34; and an out-dated version of &#34;commons-fileupload&#34; Mitigation: Upgrade to 16.11.06 or manually apply the commits from OFBIZ-10770 and OFBIZ-10837 on branch 16</p> https://cve.radiocsirt.org/vuln/ghsa-7f6q-4x5x-p74v https://cve.radiocsirt.org/vuln/gsd-2019-0189 gsd-2019-0189 https://cve.radiocsirt.org/vuln/gsd-2019-0189