Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:57:20 +0000 certfr-2016-avi-300 — De multiples vulnérabilités ont été corrigées dans <span class="textit">les produits Juniper</span>. Certaines d'entre… https://cve.radiocsirt.org/vuln/certfr-2016-avi-300 certfr-2016-avi-300 https://cve.radiocsirt.org/vuln/certfr-2016-avi-300 EUVD-2026-117239 https://cve.radiocsirt.org/vuln/euvd-2026-117239 EUVD-2026-117239 https://cve.radiocsirt.org/vuln/euvd-2026-117239 fkie_cve-2011-5245 https://cve.radiocsirt.org/vuln/fkie_cve-2011-5245 <p>The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE) injection attack, a similar vulnerability to CVE-2012-0818.</p> <p>The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE) injection attack, a similar vulnerability to CVE-2012-0818.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-5245 GHSA-g4jg-gpwv-p7wv — Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy https://cve.radiocsirt.org/vuln/ghsa-g4jg-gpwv-p7wv <p><strong>Affected:</strong> Maven: org.jboss.resteasy:resteasy-jaxb-provider</p> <p>The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE) injection attack, a similar vulnerability to CVE-2012-0818.</p> <p><strong>Affected:</strong> Maven: org.jboss.resteasy:resteasy-jaxb-provider</p> <p>The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE) injection attack, a similar vulnerability to CVE-2012-0818.</p> https://cve.radiocsirt.org/vuln/ghsa-g4jg-gpwv-p7wv gsd-2011-5245 https://cve.radiocsirt.org/vuln/gsd-2011-5245 gsd-2011-5245 https://cve.radiocsirt.org/vuln/gsd-2011-5245 RHSA-2012:0421 — Red Hat Security Advisory: rhevm security and bug fix update https://cve.radiocsirt.org/vuln/rhsa-2012:0421 <p>RESTEasy: XML eXternal Entity (XXE) flaw RESTEasy: XML eXternal Entity (XXE) flaw</p> <p>RESTEasy: XML eXternal Entity (XXE) flaw RESTEasy: XML eXternal Entity (XXE) flaw</p> https://cve.radiocsirt.org/vuln/rhsa-2012:0421