https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:08:36.003203+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-112526 EUVD-2026-112526 2026-10-03T06:08:36.014679+00:00 EUVD-2026-112526 https://cve.radiocsirt.org/vuln/fkie_cve-2012-4572 fkie_cve-2012-4572 2026-10-03T06:08:36.014721+00:00

Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization module for a new application when an implementation is already loaded and the modules share class names, which allows local users to control certain applications' authorization decisions via a crafted application.

 https://cve.radiocsirt.org/vuln/ghsa-w8gr-4mrr-7j77 GHSA-w8gr-4mrr-7j77 2026-10-03T06:08:36.014755+00:00

Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization module for a new application when an implementation is already loaded and the modules share class names, which allows local users to control certain applications' authorization decisions via a crafted application.

 https://cve.radiocsirt.org/vuln/gsd-2012-4572 gsd-2012-4572 2026-10-03T06:08:36.014773+00:00 gsd-2012-4572 https://cve.radiocsirt.org/vuln/rhsa-2013:0833 RHSA-2013:0833 — Red Hat Security Advisory: JBoss Enterprise Application Platform 6.1.0 update 2026-10-03T06:08:36.014784+00:00

Web: jsessionid exposed via encoded url when using cookie based session tracking JBoss: custom authorization module implementations shared between applications apache-cxf: XML encryption backwards compatibility attacks openssl: DoS due to improper handling of OCSP response verification SSL/TLS: CBC padding timing attack (lucky-13) Installer: Generated auto-install xml is world readable tomcat: Session fixation in form authenticator