https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T04:23:28.185082+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2020-avi-384 certfr-2020-avi-384 — De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Elles permettent à un attaquant de provoque… 2026-10-16T04:23:28.190914+00:00 certfr-2020-avi-384 https://cve.radiocsirt.org/vuln/cnvd-2015-02050 cnvd-2015-02050 2026-10-16T04:23:28.190960+00:00 cnvd-2015-02050 https://cve.radiocsirt.org/vuln/euvd-2026-89260 EUVD-2026-89260 2026-10-16T04:23:28.190984+00:00 EUVD-2026-89260 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0279 fkie_cve-2015-0279 2026-10-16T04:23:28.191006+00:00

JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.

 https://cve.radiocsirt.org/vuln/ghsa-8cc3-p77g-5pcc GHSA-8cc3-p77g-5pcc 2026-10-16T04:23:28.191044+00:00

JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.

 https://cve.radiocsirt.org/vuln/gsd-2015-0279 gsd-2015-0279 2026-10-16T04:23:28.191071+00:00 gsd-2015-0279 https://cve.radiocsirt.org/vuln/jvndb-2015-001959 jvndb-2015-001959 2026-10-16T04:23:28.191091+00:00

JBoss RichFaces contains a remote Java code execution vulnerability. JBoss RichFaces is an Ajax-enabled component library for JavaServer Faces (JSF). JBoss RichFaces contains a flaw in parsing the do parameter, which may result in arbitrary Java code execution. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/rhsa-2015:0719 RHSA-2015:0719 — Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.7.0 security update 2026-10-16T04:23:28.191123+00:00

RichFaces: Remote Command Execution via insufficient EL parameter sanitization