https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:44:57.264157+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-102801 EUVD-2026-102801 2026-10-03T01:44:57.366247+00:00 EUVD-2026-102801 https://cve.radiocsirt.org/vuln/fkie_cve-2014-7839 fkie_cve-2014-7839 2026-10-03T01:44:57.366306+00:00

DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-pc54-pchm-xcw6 GHSA-pc54-pchm-xcw6 — XML External Entity Reference in RESTEasy 2026-10-03T01:44:57.366355+00:00

Affected: Maven: org.jboss.resteasy:resteasy-jaxrs

DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2014-7839 gsd-2014-7839 2026-10-03T01:44:57.366392+00:00 gsd-2014-7839 https://cve.radiocsirt.org/vuln/rhsa-2015:0215 RHSA-2015:0215 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.3 update 2026-10-03T01:44:57.366413+00:00

Security: Wrong security context loaded when using SAML2 STS Login Module RESTeasy: External entities expanded by DocumentProvider Management: Limited RBAC authorization bypass Subsystem: Information disclosure via incorrect sensitivity classification of attribute Weld: Limited information disclosure via stale thread state

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 WID-SEC-W-2026-0180 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-03T01:44:57.366455+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.