https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:00:28.839196+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-11299 EUVD-2026-11299 2026-10-02T22:00:28.919689+00:00 EUVD-2026-11299 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0853 fkie_cve-2022-0853 2026-10-02T22:00:28.919738+00:00

A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-f67w-c9w2-5v69 GHSA-f67w-c9w2-5v69 2026-10-02T22:00:28.919773+00:00

A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2022-0853 gsd-2022-0853 2026-10-02T22:00:28.919789+00:00 gsd-2022-0853 https://cve.radiocsirt.org/vuln/rhsa-2022:4918 RHSA-2022:4918 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 7 2026-10-02T22:00:28.919801+00:00

jackson-databind: denial of service via a large depth of nested objects netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way h2: Remote Code Execution in Console netty: control chars in header names may lead to HTTP request smuggling xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr jboss-client: memory leakage in remote client transaction wildfly: Wildfly management of EJB Session context returns wrong caller principal with Elytron Security enabled undertow: Double AJP response for 400 from EAP 7 results in CPING failures OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646) h2: Loading of custom classes from remote servers through JNDI xerces-j2: infinite loop when handling specially crafted XML document payloads artemis-commons: Apache ActiveMQ Artemis DoS Moment.js: Path traversal in moment.locale