https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:48:22.117156+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-111250 EUVD-2026-111250 2026-10-03T01:48:22.260455+00:00 EUVD-2026-111250 https://cve.radiocsirt.org/vuln/fkie_cve-2012-2672 fkie_cve-2012-2672 2026-10-03T01:48:22.260520+00:00

Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function.

 https://cve.radiocsirt.org/vuln/ghsa-78gp-c2rq-6jhr GHSA-78gp-c2rq-6jhr 2026-10-03T01:48:22.260581+00:00

Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function.

 https://cve.radiocsirt.org/vuln/gsd-2012-2672 gsd-2012-2672 2026-10-03T01:48:22.260600+00:00 gsd-2012-2672 https://cve.radiocsirt.org/vuln/rhsa-2012:1591 RHSA-2012:1591 — Red Hat Security Advisory: JBoss Enterprise Application Platform 6.0.1 update 2026-10-03T01:48:22.260612+00:00

httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled apache-cxf: Certain child policies of WS-SecurityPolicy 1.1 SupportingToken policy not applied on the client side apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token Mojarra: deployed web applications can read FacesContext from other applications under certain conditions httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled JBoss: Datasource connection manager returns valid connection for wrong credentials when using security-domains apache-cxf: SOAPAction spoofing on document literal web services JBoss Enterprise Application Platform: org.jboss.as.ejb3: JBoss Enterprise Application Platform: Access restriction bypass via improper EJB method authorization JBoss Enterprise Application Platform: JBoss EAP: JBEAP: JBoss Enterprise Application Platform: Unauthorized EJB access via authorization module bypass

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-2672 Withdrawn: UBUNTU-CVE-2012-2672 2026-10-03T01:48:22.260675+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: mojarra, Ubuntu:18.04:LTS: mojarra

Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function.