https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:54:10.637032+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-105929 EUVD-2026-105929 2026-10-03T13:54:10.700086+00:00 EUVD-2026-105929 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2102 fkie_cve-2013-2102 2026-10-03T13:54:10.700123+00:00

The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics service with no authentication when a JGroups channel is started, which allows remote attackers to obtain sensitive information (diagnostics) by accessing the service.

 https://cve.radiocsirt.org/vuln/ghsa-wv8v-33h6-fw96 GHSA-wv8v-33h6-fw96 2026-10-03T13:54:10.700157+00:00

The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics service with no authentication when a JGroups channel is started, which allows remote attackers to obtain sensitive information (diagnostics) by accessing the service.

 https://cve.radiocsirt.org/vuln/gsd-2013-2102 gsd-2013-2102 2026-10-03T13:54:10.700175+00:00 gsd-2013-2102 https://cve.radiocsirt.org/vuln/rhsa-2013:1437 RHSA-2013:1437 — Red Hat Security Advisory: Red Hat JBoss Portal 6.1.0 update 2026-10-03T13:54:10.700187+00:00

Tomcat/JBoss Web - Bypass of CSRF prevention filter Web: jsessionid exposed via encoded url when using cookie based session tracking JBoss: custom authorization module implementations shared between applications apache-cxf: XML encryption backwards compatibility attacks PicketBox: Insecure storage of masked passwords tomcat: Session fixation in form authenticator Gatein: JGroups configurations enable diagnostics without authentication apache-cxf: Multiple denial of service flaws in the StAX parser Java: XML signature spoofing JGroups: Authentication via cached credentials remote-naming: Session fixation due improper connection caching ejb-client: Session fixation due improper connection caching Bayeux: Reflected Cross-Site Scripting (XSS)