CVE-2024-27905

The Apache Aurora task scheduling framework is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200). An endpoint exposing internal details to unauthenticated users functions as a padding oracle , enabling an anonymous attacker to construct a valid authentication c...

CVE-2016-4437

The CVE-2016-4437 issue affects Apache Shiro before 1.2.5 when no cipher key is configured for the rememberMe feature, enabling remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter. Public advisories describe an RCE condition with ...