Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:00:12 +0000 EUVD-2026-120118 https://cve.radiocsirt.org/vuln/euvd-2026-120118 EUVD-2026-120118 https://cve.radiocsirt.org/vuln/euvd-2026-120118 fkie_cve-2010-3708 https://cve.radiocsirt.org/vuln/fkie_cve-2010-3708 <p>The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.</p> <p>The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-3708 GHSA-qvq6-cw53-rmwg — Drools Improper Input Validation vulnerability allows remote attackers to execute arbitrary code in JBoss EAP https://cve.radiocsirt.org/vuln/ghsa-qvq6-cw53-rmwg <p><strong>Affected:</strong> Maven: org.drools:drools-core</p> <p>The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.</p> <p>The maintainers of JBoss EAP patched the vulnerability by applying a fix from Drools 4.0.7.</p> <p><strong>Affected:</strong> Maven: org.drools:drools-core</p> <p>The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.</p> <p>The maintainers of JBoss EAP patched the vulnerability by applying a fix from Drools 4.0.7.</p> https://cve.radiocsirt.org/vuln/ghsa-qvq6-cw53-rmwg gsd-2010-3708 https://cve.radiocsirt.org/vuln/gsd-2010-3708 gsd-2010-3708 https://cve.radiocsirt.org/vuln/gsd-2010-3708 RHSA-2010:0937 — Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP09 update https://cve.radiocsirt.org/vuln/rhsa-2010:0937 <p>JBoss drools deserialization remote code execution JBoss Remoting Denial-Of-Service JBoss EAP jmx console FileDeployment CSRF</p> <p>JBoss drools deserialization remote code execution JBoss Remoting Denial-Of-Service JBoss EAP jmx console FileDeployment CSRF</p> https://cve.radiocsirt.org/vuln/rhsa-2010:0937