https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:46:33.162714+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-03553 cnvd-2020-03553 2026-10-03T20:46:33.398340+00:00 cnvd-2020-03553 https://cve.radiocsirt.org/vuln/euvd-2026-56709 EUVD-2026-56709 2026-10-03T20:46:33.398397+00:00 EUVD-2026-56709 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14885 fkie_cve-2019-14885 2026-10-03T20:46:33.398412+00:00

A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential information of the system property's security attribute value is revealed in the JBoss EAP log file when executing a JBoss CLI 'reload' command. This flaw can lead to the exposure of confidential information.

 https://cve.radiocsirt.org/vuln/ghsa-cxpp-v3rm-fq33 GHSA-cxpp-v3rm-fq33 2026-10-03T20:46:33.398445+00:00

A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential information of the system property's security attribute value is revealed in the JBoss EAP log file when executing a JBoss CLI 'reload' command. This flaw can lead to the exposure of confidential information.

 https://cve.radiocsirt.org/vuln/gsd-2019-14885 gsd-2019-14885 2026-10-03T20:46:33.398463+00:00 gsd-2019-14885 https://cve.radiocsirt.org/vuln/rhsa-2020:0159 RHSA-2020:0159 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.6 on RHEL 6 security update 2026-10-03T20:46:33.398475+00:00

hibernate-validator: safeHTML validator allows XSS jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig EAP: Vault system property security attribute value is revealed on CLI 'reload' command undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS jackson-databind: Serialization gadgets in classes of the commons-configuration package jackson-databind: Serialization gadgets in classes of the xalan package jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource jackson-databind: Serialization gadgets in classes of the ehcache package jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*