Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:14:01 +0000 certa-2013-avi-440 — De multiples vulnérabilités ont été corrigées dans <span class="textit">HP Network Node Manager I</span>. Elles permett… https://cve.radiocsirt.org/vuln/certa-2013-avi-440 certa-2013-avi-440 https://cve.radiocsirt.org/vuln/certa-2013-avi-440 EUVD-2026-116892 https://cve.radiocsirt.org/vuln/euvd-2026-116892 EUVD-2026-116892 https://cve.radiocsirt.org/vuln/euvd-2026-116892 fkie_cve-2011-4605 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4605 <p>The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly restrict write access, which allows remote attackers to add, delete, or modify items in a JNDI tree via unspecified vectors.</p> <p>The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly restrict write access, which allows remote attackers to add, delete, or modify items in a JNDI tree via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-4605 GHSA-985p-jvqf-v48m https://cve.radiocsirt.org/vuln/ghsa-985p-jvqf-v48m <p>The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly restrict write access, which allows remote attackers to add, delete, or modify items in a JNDI tree via unspecified vectors.</p> <p>The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly restrict write access, which allows remote attackers to add, delete, or modify items in a JNDI tree via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-985p-jvqf-v48m gsd-2011-4605 https://cve.radiocsirt.org/vuln/gsd-2011-4605 gsd-2011-4605 https://cve.radiocsirt.org/vuln/gsd-2011-4605 RHSA-2012:1022 — Red Hat Security Advisory: jbossas security update https://cve.radiocsirt.org/vuln/rhsa-2012:1022 <p>JNDI: unauthenticated remote write access is permitted by default</p> <p>JNDI: unauthenticated remote write access is permitted by default</p> https://cve.radiocsirt.org/vuln/rhsa-2012:1022