https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:31:36.391052+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-04543 cnvd-2015-04543 2026-10-03T06:31:36.469291+00:00 cnvd-2015-04543 https://cve.radiocsirt.org/vuln/euvd-2026-90539 EUVD-2026-90539 2026-10-03T06:31:36.469330+00:00 EUVD-2026-90539 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1796 fkie_cve-2015-1796 2026-10-03T06:31:36.469345+00:00

The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID, which allows remote attackers to impersonate an entity via a certificate issued by a shibmd:KeyAuthority trust anchor.

 https://cve.radiocsirt.org/vuln/ghsa-78fq-w796-q537 GHSA-78fq-w796-q537 — Improper Certificate Validation in Shibboleth Identity Provider and OpenSAML 2026-10-03T06:31:36.469375+00:00

Affected: Maven: org.opensaml:opensaml, Maven: edu.internet2.middleware:shibboleth-identityprovider

The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID, which allows remote attackers to impersonate an entity via a certificate issued by a shibmd:KeyAuthority trust anchor.

 https://cve.radiocsirt.org/vuln/gsd-2015-1796 gsd-2015-1796 2026-10-03T06:31:36.469401+00:00 gsd-2015-1796 https://cve.radiocsirt.org/vuln/rhsa-2015:1176 RHSA-2015:1176 — Red Hat Security Advisory: Red Hat JBoss Fuse 6.2.0 update 2026-10-03T06:31:36.469413+00:00

async-http-client: SSL/TLS certificate verification is disabled under certain conditions async-http-client: missing hostname verification for SSL certificates smack: incorrect X.509 certificate validation smack: IQ response spoofing CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix smack: MitM vulnerability wss4j: Apache WSS4J is vulnerable to Bleichenbacher's attack (incomplete fix for CVE-2011-2487) wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property Java: PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation activemq: Fileserver web application vulnerability allowing RCE