https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:08:20.564382+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-951 certfr-2021-avi-951 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de RedHat. Certaines d'entre elles permettent à un… 2026-10-03T09:08:20.743386+00:00 certfr-2021-avi-951 https://cve.radiocsirt.org/vuln/euvd-2026-47567 EUVD-2026-47567 2026-10-03T09:08:20.743440+00:00 EUVD-2026-47567 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35510 fkie_cve-2020-35510 2026-10-03T09:08:20.743466+00:00

A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001. A malicious attacker could cause threads to hold up forever in the EJB server by writing a sequence of bytes corresponding to the expected messages of a successful EJB client request, but omitting the ACK messages, or just tamper with jboss-remoting code, deleting the lines that send the ACK message from the EJB client code resulting in a denial of service. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/ghsa-p6j8-hgv5-m35g GHSA-p6j8-hgv5-m35g — Uncontrolled Resource Consumption in jboss-remoting 2026-10-03T09:08:20.743509+00:00

Affected: Maven: org.jboss.remoting:jboss-remoting

A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001. A malicious attacker could cause threads to hold up forever in the EJB server by writing a sequence of bytes corresponding to the expected messages of a successful EJB client request, but omitting the ACK messages, or just tamper with jboss-remoting code, deleting the lines that send the ACK message from the EJB client code resulting in a denial of service. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/gsd-2020-35510 gsd-2020-35510 2026-10-03T09:08:20.743536+00:00 gsd-2020-35510 https://cve.radiocsirt.org/vuln/rhsa-2021:0872 RHSA-2021:0872 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update 2026-10-03T09:08:20.743549+00:00

guava: local information disclosure via temporary directory created with unsafe permissions Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible jboss-remoting: Threads hold up forever in the EJB server by suppressing the ack from an EJB client undertow: Possible regression in fix for CVE-2020-10687 wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1272 WID-SEC-W-2023-1272 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-03T09:08:20.743580+00:00

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial-of-Service-Zustand auslösen, Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder einen Cross-Site-Scripting-Angriff durchführen.