Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 16:53:01 +0000 cnvd-2023-03919 https://cve.radiocsirt.org/vuln/cnvd-2023-03919 cnvd-2023-03919 https://cve.radiocsirt.org/vuln/cnvd-2023-03919 EUVD-2026-14741 https://cve.radiocsirt.org/vuln/euvd-2026-14741 EUVD-2026-14741 https://cve.radiocsirt.org/vuln/euvd-2026-14741 fkie_cve-2022-25813 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25813 <p>In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can insert a malicious content in a message “Subject” field from the &#34;Contact us&#34; page. Then a party manager needs to list the communications in the party component to activate the SSTI. A RCE is then possible.</p> <p>In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can insert a malicious content in a message “Subject” field from the &#34;Contact us&#34; page. Then a party manager needs to list the communications in the party component to activate the SSTI. A RCE is then possible.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-25813 GHSA-wrch-3crx-rcpq https://cve.radiocsirt.org/vuln/ghsa-wrch-3crx-rcpq <p>In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can insert a malicious content in a message “Subject” field from the &#34;Contact us&#34; page. Then a party manager needs to list the communications in the party component to activate the SSTI. A RCE is then possible.</p> <p>In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can insert a malicious content in a message “Subject” field from the &#34;Contact us&#34; page. Then a party manager needs to list the communications in the party component to activate the SSTI. A RCE is then possible.</p> https://cve.radiocsirt.org/vuln/ghsa-wrch-3crx-rcpq gsd-2022-25813 https://cve.radiocsirt.org/vuln/gsd-2022-25813 gsd-2022-25813 https://cve.radiocsirt.org/vuln/gsd-2022-25813