https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:08:06 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0719 certfr-2026-avi-0719 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0719 https://cve.radiocsirt.org/vuln/euvd-2026-330900 EUVD-2026-330900 https://cve.radiocsirt.org/vuln/euvd-2026-330900 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40993 <p>An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_asserting_party_metadata) may be able to store malicious serialized payloads in the columns containing the collection of verification or encryption credentials (verification_credentials and encryption_credentials, respectively).</p> <p>Affected versions: Spring Security 7.0.0 through 7.0.5.</p> <p>An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_asserting_party_metadata) may be able to store malicious serialized payloads in the columns containing the collection of verification or encryption credentials (verification_credentials and encryption_credentials, respectively).</p> <p>Affected versions: Spring Security 7.0.0 through 7.0.5.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40993 https://cve.radiocsirt.org/vuln/ghsa-2q7c-5gjm-7q23 <p><strong>Affected:</strong> Maven: org.springframework.security:spring-security-saml2-service-provider</p> <p>An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_asserting_party_metadata) may be able to store malicious serialized payloads in the columns containing the collection of verification or encryption credentials (verification_credentials and encryption_credentials, respectively).</p> <p>Affected versions: Spring Security 7.0.0 through 7.0.5.</p> <p><strong>Affected:</strong> Maven: org.springframework.security:spring-security-saml2-service-provider</p> <p>An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_asserting_party_metadata) may be able to store malicious serialized payloads in the columns containing the collection of verification or encryption credentials (verification_credentials and encryption_credentials, respectively).</p> <p>Affected versions: Spring Security 7.0.0 through 7.0.5.</p> https://cve.radiocsirt.org/vuln/ghsa-2q7c-5gjm-7q23 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1869 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Security ausnutzen, um einen Denial of Service zu verursachen, beliebigen Code auszuführen, Benutzer auf beliebige Websites umzuleiten, Informationen offenzulegen und die Identität eines anderen Benutzers anzunehmen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Security ausnutzen, um einen Denial of Service zu verursachen, beliebigen Code auszuführen, Benutzer auf beliebige Websites umzuleiten, Informationen offenzulegen und die Identität eines anderen Benutzers anzunehmen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1869