https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:05:02 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01622 bdu:2024-01622 https://cve.radiocsirt.org/vuln/bdu:2024-01622 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0154 certfr-2025-avi-0154 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0154 https://cve.radiocsirt.org/vuln/euvd-2026-12721 EUVD-2026-12721 https://cve.radiocsirt.org/vuln/euvd-2026-12721 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4245 <p>A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --&gt; sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.</p> <p>A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --&gt; sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-4245 https://cve.radiocsirt.org/vuln/ghsa-jcwr-x25h-x5fh <p><strong>Affected:</strong> Maven: org.codehaus.plexus:plexus-utils</p> <p>A flaw was found in codehaus-plexus. The `org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment` fails to sanitize comments for a `--&gt;` sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.</p> <p><strong>Affected:</strong> Maven: org.codehaus.plexus:plexus-utils</p> <p>A flaw was found in codehaus-plexus. The `org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment` fails to sanitize comments for a `--&gt;` sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.</p> https://cve.radiocsirt.org/vuln/ghsa-jcwr-x25h-x5fh https://cve.radiocsirt.org/vuln/gsd-2022-4245 gsd-2022-4245 https://cve.radiocsirt.org/vuln/gsd-2022-4245 https://cve.radiocsirt.org/vuln/rhsa-2023:2135 <p>keycloak: path traversal via double URL encoding codehaus-plexus: Directory Traversal codehaus-plexus: XML External Entity (XXE) Injection jettison: parser crash by stackoverflow jettison: memory exhaustion via user-supplied XML or JSON data jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays apache-commons-text: variable interpolation RCE jettison: If the value in map is the map&#39;s self, the new new JSONObject(map) cause StackOverflowError which may lead to dos CXF: directory listing / code exfiltration CXF: SSRF Vulnerability Undertow: Infinite loop in SslConduit during close</p> <p>keycloak: path traversal via double URL encoding codehaus-plexus: Directory Traversal codehaus-plexus: XML External Entity (XXE) Injection jettison: parser crash by stackoverflow jettison: memory exhaustion via user-supplied XML or JSON data jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays apache-commons-text: variable interpolation RCE jettison: If the value in map is the map&#39;s self, the new new JSONObject(map) cause StackOverflowError which may lead to dos CXF: directory listing / code exfiltration CXF: SSRF Vulnerability Undertow: Infinite loop in SslConduit during close</p> https://cve.radiocsirt.org/vuln/rhsa-2023:2135 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4245 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: plexus-utils2, Ubuntu:16.04:LTS: plexus-utils2, Ubuntu:18.04:LTS: plexus-utils2</p> <p>A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --&gt; sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: plexus-utils2, Ubuntu:16.04:LTS: plexus-utils2, Ubuntu:18.04:LTS: plexus-utils2</p> <p>A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --&gt; sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4245 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180