https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:18:32.193664+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-00734 bdu:2015-00734 2026-10-03T04:18:32.348574+00:00 bdu:2015-00734 https://cve.radiocsirt.org/vuln/certfr-2014-avi-313 certfr-2014-avi-313 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle Fusion Middleware</span>. Elles permette… 2026-10-03T04:18:32.348619+00:00 certfr-2014-avi-313 https://cve.radiocsirt.org/vuln/euvd-2026-108290 EUVD-2026-108290 2026-10-03T04:18:32.348638+00:00 EUVD-2026-108290 https://cve.radiocsirt.org/vuln/fkie_cve-2013-5855 fkie_cve-2013-5855 2026-10-03T04:18:32.348650+00:00

Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) <h:outputText> tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors.

 https://cve.radiocsirt.org/vuln/ghsa-3m3r-82gc-53mj GHSA-3m3r-82gc-53mj — Improper Neutralization of Input During Web Page Generation in Mojarra 2026-10-03T04:18:32.348679+00:00

Affected: Maven: org.glassfish:javax.faces

Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) <h:outputText> tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors.

 https://cve.radiocsirt.org/vuln/gsd-2013-5855 gsd-2013-5855 2026-10-03T04:18:32.348704+00:00 gsd-2013-5855 https://cve.radiocsirt.org/vuln/rhsa-2014:0896 RHSA-2014:0896 — Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.6.0 update 2026-10-03T04:18:32.348716+00:00

bouncycastle: TLS CBC padding timing attack JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-5855 Withdrawn: UBUNTU-CVE-2013-5855 2026-10-03T04:18:32.348733+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: mojarra, Ubuntu:18.04:LTS: mojarra

Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) <h:outputText> tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors.