https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:08:43.176645+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-07084 cnvd-2016-07084 2026-10-03T03:08:43.276559+00:00 cnvd-2016-07084 https://cve.radiocsirt.org/vuln/euvd-2026-85781 EUVD-2026-85781 2026-10-03T03:08:43.276602+00:00 EUVD-2026-85781 https://cve.radiocsirt.org/vuln/fkie_cve-2016-6344 fkie_cve-2016-6344 2026-10-03T03:08:43.276617+00:00

Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.

 https://cve.radiocsirt.org/vuln/ghsa-jhjx-rgjj-x5xp GHSA-jhjx-rgjj-x5xp 2026-10-03T03:08:43.276647+00:00

Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.

 https://cve.radiocsirt.org/vuln/gsd-2016-6344 gsd-2016-6344 2026-10-03T03:08:43.276663+00:00 gsd-2016-6344 https://cve.radiocsirt.org/vuln/rhsa-2017:0248 RHSA-2017:0248 — Red Hat Security Advisory: Red Hat JBoss BRMS security update 2026-10-03T03:08:43.276674+00:00

pdfbox: XML External Entity vulnerability tika: XML External Entity vulnerability JBoss bpms 6.3.x cookie does not set httponly