Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:08:20 +0000 certa-2011-avi-703 — Plusieurs vulnérabilités affectent JBoss. Elles permettent de contourner la politique de sécurité du serveur ou de réal… https://cve.radiocsirt.org/vuln/certa-2011-avi-703 certa-2011-avi-703 https://cve.radiocsirt.org/vuln/certa-2011-avi-703 EUVD-2026-116660 https://cve.radiocsirt.org/vuln/euvd-2026-116660 EUVD-2026-116660 https://cve.radiocsirt.org/vuln/euvd-2026-116660 fkie_cve-2011-4085 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4085 <p>The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.</p> <p>The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-4085 GHSA-24wp-35x7-5hx9 https://cve.radiocsirt.org/vuln/ghsa-24wp-35x7-5hx9 <p>The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.</p> <p>The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.</p> https://cve.radiocsirt.org/vuln/ghsa-24wp-35x7-5hx9 gsd-2011-4085 https://cve.radiocsirt.org/vuln/gsd-2011-4085 gsd-2011-4085 https://cve.radiocsirt.org/vuln/gsd-2011-4085 RHSA-2011:1456 — Red Hat Security Advisory: JBoss Enterprise SOA Platform 5.2.0 update https://cve.radiocsirt.org/vuln/rhsa-2011:1456 <p>jruby: XSS in the regular expression engine when processing invalid UTF-8 byte sequences Invoker servlets authentication bypass (HTTP verb tampering)</p> <p>jruby: XSS in the regular expression engine when processing invalid UTF-8 byte sequences Invoker servlets authentication bypass (HTTP verb tampering)</p> https://cve.radiocsirt.org/vuln/rhsa-2011:1456