https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:41:52.792358+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-123408 EUVD-2026-123408 2026-10-03T18:41:52.909613+00:00 EUVD-2026-123408 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2405 fkie_cve-2009-2405 2026-10-03T18:41:52.909665+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML via the (1) monitorName, (2) objectName, (3) attribute, or (4) period parameter to createSnapshot.jsp, or the (5) monitorName, (6) objectName, (7) attribute, (8) threshold, (9) period, or (10) enabled parameter to createThresholdMonitor.jsp. NOTE: some of these details are obtained from third party information.

 https://cve.radiocsirt.org/vuln/ghsa-4q38-x98f-3p77 GHSA-4q38-x98f-3p77 2026-10-03T18:41:52.909716+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML via the (1) monitorName, (2) objectName, (3) attribute, or (4) period parameter to createSnapshot.jsp, or the (5) monitorName, (6) objectName, (7) attribute, (8) threshold, (9) period, or (10) enabled parameter to createThresholdMonitor.jsp. NOTE: some of these details are obtained from third party information.

 https://cve.radiocsirt.org/vuln/gsd-2009-2405 gsd-2009-2405 2026-10-03T18:41:52.909752+00:00 gsd-2009-2405 https://cve.radiocsirt.org/vuln/rhsa-2009:1636 RHSA-2009:1636 — Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP07 update 2026-10-03T18:41:52.909777+00:00

xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass jbossas JMX-Console cross-site-scripting in filter parameter JBoss Application Server Web Console XSS JDK: XML parsing Denial-Of-Service (6845701) JBoss EAP Twiddle logs the JMX password