https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:15:48.897070+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-06637 bdu:2022-06637 2026-10-03T07:15:49.034085+00:00 bdu:2022-06637 https://cve.radiocsirt.org/vuln/euvd-2026-99359 EUVD-2026-99359 2026-10-03T07:15:49.034123+00:00 EUVD-2026-99359 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3623 fkie_cve-2014-3623 2026-10-03T07:15:49.034136+00:00

Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-99v3-9x35-c5vf GHSA-99v3-9x35-c5vf — Improper Authentication in Apache WSS4J 2026-10-03T07:15:49.034165+00:00

Affected: Maven: org.apache.ws.security:wss4j, Maven: org.apache.wss4j:wss4j-ws-security-dom

Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2014-3623 gsd-2014-3623 2026-10-03T07:15:49.034190+00:00 gsd-2014-3623 https://cve.radiocsirt.org/vuln/rhsa-2014:2019 RHSA-2014:2019 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.2 security update 2026-10-03T07:15:49.034202+00:00

CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen 2026-10-03T07:15:49.034222+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.