https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:19:10.516438+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-02712 cnvd-2015-02712 2026-10-03T04:19:10.522609+00:00 cnvd-2015-02712 https://cve.radiocsirt.org/vuln/euvd-2026-102994 EUVD-2026-102994 2026-10-03T04:19:10.522644+00:00 EUVD-2026-102994 https://cve.radiocsirt.org/vuln/fkie_cve-2014-8125 fkie_cve-2014-8125 2026-10-03T04:19:10.522658+00:00

XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.

 https://cve.radiocsirt.org/vuln/ghsa-6qx9-rf9g-7jmr GHSA-6qx9-rf9g-7jmr — Improper Input Validation in Drools and jBPM 2026-10-03T04:19:10.522685+00:00

Affected: Maven: org.drools:drools-core, Maven: org.jbpm:jbpm-bpmn2

XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.

 https://cve.radiocsirt.org/vuln/gsd-2014-8125 gsd-2014-8125 2026-10-03T04:19:10.522708+00:00 gsd-2014-8125 https://cve.radiocsirt.org/vuln/rhsa-2015:0850 RHSA-2015:0850 — Red Hat Security Advisory: Red Hat JBoss BRMS 6.1.0 update 2026-10-03T04:19:10.522719+00:00

CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix WS: EJB3 role restrictions are not applied to jaxws handlers Java: Java XML Signature DoS Attack async-http-client: SSL/TLS certificate verification is disabled under certain conditions async-http-client: missing hostname verification for SSL certificates CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy JBossSX/PicketBox: World readable audit.log file CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods Security: Wrong security context loaded when using SAML2 STS Login Module RESTeasy: External entities expanded by DocumentProvider Weld: Limited information disclosure via stale thread state jBPM: BPMN2 file processing XXE in Process Execution

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 WID-SEC-W-2026-0180 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-03T04:19:10.522749+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.