https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 04:51:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-182243 EUVD-2026-182243 https://cve.radiocsirt.org/vuln/euvd-2026-182243 https://cve.radiocsirt.org/vuln/fkie_cve-2010-2086 <p>Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object.</p> <p>Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-2086 https://cve.radiocsirt.org/vuln/ghsa-92cv-wv2c-8899 <p><strong>Affected:</strong> Maven: org.apache.myfaces.core:myfaces-core-module</p> <p>Apache MyFaces 1.1.7 and 1.2.8 (All previous versions are likely vulnerable), as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object.</p> <p><strong>Affected:</strong> Maven: org.apache.myfaces.core:myfaces-core-module</p> <p>Apache MyFaces 1.1.7 and 1.2.8 (All previous versions are likely vulnerable), as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object.</p> https://cve.radiocsirt.org/vuln/ghsa-92cv-wv2c-8899 https://cve.radiocsirt.org/vuln/gsd-2010-2086 gsd-2010-2086 https://cve.radiocsirt.org/vuln/gsd-2010-2086 https://cve.radiocsirt.org/vuln/rhsa-2010:0119 <p>tomcat: unexpected file deletion and/or alteration tomcat: unexpected file deletion in work directory TLS: MITM attacks via session renegotiation MyFaces: XSS via state view</p> <p>tomcat: unexpected file deletion and/or alteration tomcat: unexpected file deletion in work directory TLS: MITM attacks via session renegotiation MyFaces: XSS via state view</p> https://cve.radiocsirt.org/vuln/rhsa-2010:0119