CVE-2017-9805

CVE-2017-9805 affects the Apache Struts 2 REST plugin. The REST plugin uses an XStreamHandler with an XStream instance to deserialize XML without any type filtering, enabling remote code execution when processing crafted XML payloads. Affected versions are Struts 2.1.1–2.3.x before 2.3.34 and 2.5...

CVE-2013-3446

Cisco Digital Media Manager (DMM) is affected by CVE-2013-3446: an open redirect in the DMM login page could allow an unauthenticated, remote attacker to redirect users to an arbitrary external URL, potentially enabling phishing. The issue stems from an open redirect vulnerability in the login fl...