https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T01:26:50.690388+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-118881 EUVD-2026-118881 2026-10-28T01:26:50.693145+00:00 EUVD-2026-118881 https://cve.radiocsirt.org/vuln/fkie_cve-2010-2057 fkie_cve-2010-2057 2026-10-28T01:26:50.693178+00:00

shared/util/StateUtils.java in Apache MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1 uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack.

 https://cve.radiocsirt.org/vuln/ghsa-4fv4-cq5v-x45m GHSA-4fv4-cq5v-x45m — Improper Authentication in Apache MyFaces 2026-10-28T01:26:50.693209+00:00

Affected: Maven: org.apache.myfaces.shared:myfaces-shared-core, Maven: org.apache.myfaces.core:myfaces-impl

shared/util/StateUtils.java in Apache MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1 uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack.

 https://cve.radiocsirt.org/vuln/gsd-2010-2057 gsd-2010-2057 2026-10-28T01:26:50.693237+00:00 gsd-2010-2057