https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:00:55.560351+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-03869 cnvd-2016-03869 2026-10-02T18:00:55.572192+00:00 cnvd-2016-03869 https://cve.radiocsirt.org/vuln/euvd-2026-256387 EUVD-2026-256387 2026-10-02T18:00:55.572231+00:00 EUVD-2026-256387 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4437 fkie_cve-2016-4437 2026-10-02T18:00:55.572246+00:00

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

 https://cve.radiocsirt.org/vuln/ghsa-p836-389h-j692 GHSA-p836-389h-j692 — Improper Access Control in Apache Shiro 2026-10-02T18:00:55.572278+00:00

Affected: Maven: org.apache.shiro:shiro-core

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

 https://cve.radiocsirt.org/vuln/gsd-2016-4437 gsd-2016-4437 2026-10-02T18:00:55.572302+00:00 gsd-2016-4437 https://cve.radiocsirt.org/vuln/rhsa-2016:2035 RHSA-2016:2035 — Red Hat Security Advisory: Red Hat JBoss Fuse 6.3 security update 2026-10-02T18:00:55.572314+00:00

Framework: denial-of-service attack with XML input ObjectMessage: unsafe deserialization camel-xstream: Java object de-serialization vulnerability leads to RCE Camel: Java object deserialisation in Jetty/Servlet bouncycastle: Invalid curve attack allowing to extract private keys JGroups: Authorization bypass bsh2: remote code execution via deserialization shiro: Security constraint bypass

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4437 UBUNTU-CVE-2016-4437 2026-10-02T18:00:55.572339+00:00

Affected: Ubuntu:Pro:16.04:LTS: shiro

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3616 WID-SEC-W-2024-3616 — Red Hat JBoss Fuse: Mehrere Schwachstellen 2026-10-02T18:00:55.572358+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Fuse und Red Hat JBoss A-MQ ausnutzen, um einen Denial of Service Angriff durchzuführen, Code mit den Privilegien des angegriffenen Dienstes zur Ausführung bringen, vertrauliche Daten einzusehen, Informationen zu manipulieren oder Sicherheitsmechanismen zu umgehen.