https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:07:00.076431+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-01420 cnvd-2015-01420 2026-10-03T23:07:00.147190+00:00 cnvd-2015-01420 https://cve.radiocsirt.org/vuln/euvd-2026-99437 EUVD-2026-99437 2026-10-03T23:07:00.147249+00:00 EUVD-2026-99437 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3682 fkie_cve-2014-3682 2026-10-03T23:07:00.147265+00:00

XML external entity (XXE) vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java in jbpm-designer 6.0.x and 6.2.x allows remote attackers to read arbitrary files and possibly have other unspecified impact by importing a crafted BPMN2 file.

 https://cve.radiocsirt.org/vuln/ghsa-p5xg-9chh-rh94 GHSA-p5xg-9chh-rh94 2026-10-03T23:07:00.147295+00:00

XML external entity (XXE) vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java in jbpm-designer 6.0.x and 6.2.x allows remote attackers to read arbitrary files and possibly have other unspecified impact by importing a crafted BPMN2 file.

 https://cve.radiocsirt.org/vuln/gsd-2014-3682 gsd-2014-3682 2026-10-03T23:07:00.147311+00:00 gsd-2014-3682 https://cve.radiocsirt.org/vuln/rhsa-2015:0234 RHSA-2015:0234 — Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.0.3 security update 2026-10-03T23:07:00.147322+00:00

CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix OpenJDK: XML parsing Denial of Service (JAXP, 8017298) JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs Tomcat/JBossWeb: Request smuggling via malicious content length header Tomcat/JBossWeb: XML parser hijack by malicious web application netty: DoS via memory exhaustion during data aggregation Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter Security: Invalid EJB caller role check implementation RESTEasy: XXE via parameter entities PicketLink: XXE via insecure DocumentBuilderFactory usage Validator: JSM bypass via ReflectionHelper CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix Framework: Directory traversal Framework: directory traversal flaw jbpm-designer: XXE in BPMN2 import UberFire: Information disclosure and RCE via insecure file upload/download servlets Workbench: Insufficient authorization constraints