Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:26:27 +0000 CVE-2018-25007 — Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11 https://cve.radiocsirt.org/vuln/cve-2018-25007 <p><strong>Affected:</strong> Vaadin, Vaadin flow-server</p> <p>Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message.</p> <p><strong>Affected:</strong> Vaadin, Vaadin flow-server</p> <p>Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message.</p> https://cve.radiocsirt.org/vuln/cve-2018-25007