https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:10:44.188219+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99242 EUVD-2026-99242 2026-10-03T01:10:44.330857+00:00 EUVD-2026-99242 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3490 fkie_cve-2014-3490 2026-10-03T01:10:44.330900+00:00

RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0818.

 https://cve.radiocsirt.org/vuln/ghsa-qjpq-5pq3-43rr GHSA-qjpq-5pq3-43rr — Incorrect Privilege Assignment in RESTEasy 2026-10-03T01:10:44.330936+00:00

Affected: Maven: org.jboss.resteasy:resteasy-client

RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0818.

 https://cve.radiocsirt.org/vuln/gsd-2014-3490 gsd-2014-3490 2026-10-03T01:10:44.330963+00:00 gsd-2014-3490 https://cve.radiocsirt.org/vuln/rhsa-2014:1011 RHSA-2014:1011 — Red Hat Security Advisory: resteasy-base security update 2026-10-03T01:10:44.330976+00:00

RESTEasy: XXE via parameter entities

 https://cve.radiocsirt.org/vuln/rhsa-2014:1039 RHSA-2014:1039 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.0 security update 2026-10-03T01:10:44.330994+00:00

RESTEasy: XXE via parameter entities

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 WID-SEC-W-2026-0180 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-03T01:10:44.331008+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.