Most recent entries from all

certa-2011-avi-521 — Une vulnérabilité dans un module de JBoss permet à un utilisateur malveillant de provoquer un déni de service à distanc…

2026-10-03T08:16:00.568926+00:00

certa-2011-avi-521

EUVD-2026-114772

2026-10-03T08:16:00.568966+00:00

EUVD-2026-114772

fkie_cve-2011-1483

2026-10-03T08:16:00.568981+00:00

wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564.

GHSA-rj4p-7mm6-gm9j — JBossWS vulnerable to uncontrolled recursion

2026-10-03T08:16:00.569013+00:00

Affected: Maven: org.jboss.ws:jbossws-common

DOMUtils.java in org.jboss.ws:jbossws-common does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564.

gsd-2011-1483

2026-10-03T08:16:00.569037+00:00

gsd-2011-1483

RHSA-2011:1301 — Red Hat Security Advisory: jbossws-common security update

2026-10-03T08:16:00.569048+00:00

JBossWS remote Denial of Service