https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:29:28.046610+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99222 EUVD-2026-99222 2026-10-02T17:29:28.059898+00:00 EUVD-2026-99222 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3464 fkie_cve-2014-3464 2026-10-02T17:29:28.059954+00:00

The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) 6.2.0 and 6.3.0, does not properly enforce the method level restrictions for outbound messages, which allows remote authenticated users to access otherwise restricted JAX-WS handlers by leveraging permissions to the EJB class. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2133.

 https://cve.radiocsirt.org/vuln/ghsa-jm2h-vv8x-8cv3 GHSA-jm2h-vv8x-8cv3 2026-10-02T17:29:28.059988+00:00

The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) 6.2.0 and 6.3.0, does not properly enforce the method level restrictions for outbound messages, which allows remote authenticated users to access otherwise restricted JAX-WS handlers by leveraging permissions to the EJB class. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2133.

 https://cve.radiocsirt.org/vuln/gsd-2014-3464 gsd-2014-3464 2026-10-02T17:29:28.060007+00:00 gsd-2014-3464 https://cve.radiocsirt.org/vuln/rhsa-2014:1019 RHSA-2014:1019 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.0 update 2026-10-02T17:29:28.060019+00:00

httpd: mod_deflate denial of service netty: DoS via memory exhaustion during data aggregation httpd: mod_status heap-based buffer overflow Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter httpd: mod_cgid denial of service WS: Incomplete fix for CVE-2013-2133 Security: Invalid EJB caller role check implementation