https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:36:19.014902+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-112528 EUVD-2026-112528 2026-10-03T03:36:19.026369+00:00 EUVD-2026-112528 https://cve.radiocsirt.org/vuln/fkie_cve-2012-4529 fkie_cve-2012-4529 2026-10-03T03:36:19.026417+00:00

The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id (1) via a man-in-the-middle attack or (2) by reading a log.

 https://cve.radiocsirt.org/vuln/ghsa-jfrq-h23h-p4q6 GHSA-jfrq-h23h-p4q6 2026-10-03T03:36:19.026461+00:00

The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id (1) via a man-in-the-middle attack or (2) by reading a log.

 https://cve.radiocsirt.org/vuln/gsd-2012-4529 gsd-2012-4529 2026-10-03T03:36:19.026479+00:00 gsd-2012-4529 https://cve.radiocsirt.org/vuln/rhsa-2013:0833 RHSA-2013:0833 — Red Hat Security Advisory: JBoss Enterprise Application Platform 6.1.0 update 2026-10-03T03:36:19.026490+00:00

Web: jsessionid exposed via encoded url when using cookie based session tracking JBoss: custom authorization module implementations shared between applications apache-cxf: XML encryption backwards compatibility attacks openssl: DoS due to improper handling of OCSP response verification SSL/TLS: CBC padding timing attack (lucky-13) Installer: Generated auto-install xml is world readable tomcat: Session fixation in form authenticator