https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:06:34.908979+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-05644 cnvd-2015-05644 2026-10-03T12:06:35.055975+00:00 cnvd-2015-05644 https://cve.radiocsirt.org/vuln/euvd-2026-94077 EUVD-2026-94077 2026-10-03T12:06:35.056024+00:00 EUVD-2026-94077 https://cve.radiocsirt.org/vuln/fkie_cve-2015-6254 fkie_cve-2015-6254 2026-10-03T12:06:35.056039+00:00

The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in a SAML assertion matches the location from which the message was received, which allows remote attackers to have unspecified impact via unknown vectors. NOTE: this identifier was SPLIT from CVE-2015-0277 per ADT2 due to different vulnerability types.

 https://cve.radiocsirt.org/vuln/ghsa-cc8r-2q55-6c87 GHSA-cc8r-2q55-6c87 2026-10-03T12:06:35.056072+00:00

The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in a SAML assertion matches the location from which the message was received, which allows remote attackers to have unspecified impact via unknown vectors. NOTE: this identifier was SPLIT from CVE-2015-0277 per ADT2 due to different vulnerability types.

 https://cve.radiocsirt.org/vuln/gsd-2015-6254 gsd-2015-6254 2026-10-03T12:06:35.056090+00:00 gsd-2015-6254 https://cve.radiocsirt.org/vuln/rhsa-2015:0846 RHSA-2015:0846 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.0 update 2026-10-03T12:06:35.056101+00:00

CLI: Insecure default permissions on history file mod_jk: information leak due to incorrect JkMount/JkUnmount directives processing wss4j: Apache WSS4J is vulnerable to Bleichenbacher's attack (incomplete fix for CVE-2011-2487) wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property PicketLink: SP does not take Audience condition of a SAML assertion into account mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages PicketLink: Lack of validation for the Destination attribute in a Response element in a SAML assertion