https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:19:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-111074 EUVD-2026-111074 https://cve.radiocsirt.org/vuln/euvd-2026-111074 https://cve.radiocsirt.org/vuln/fkie_cve-2012-2377 <p>JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.</p> <p>JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-2377 https://cve.radiocsirt.org/vuln/ghsa-jm5c-rgfp-cjhx <p>JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.</p> <p>JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.</p> https://cve.radiocsirt.org/vuln/ghsa-jm5c-rgfp-cjhx https://cve.radiocsirt.org/vuln/gsd-2012-2377 gsd-2012-2377 https://cve.radiocsirt.org/vuln/gsd-2012-2377 https://cve.radiocsirt.org/vuln/rhsa-2012:1028 <p>Invoker servlets authentication bypass (HTTP verb tampering) JNDI: unauthenticated remote write access is permitted by default JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm JGroups diagnostics service enabled by default with no authentication when a JGroups channel is started</p> <p>Invoker servlets authentication bypass (HTTP verb tampering) JNDI: unauthenticated remote write access is permitted by default JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm JGroups diagnostics service enabled by default with no authentication when a JGroups channel is started</p> https://cve.radiocsirt.org/vuln/rhsa-2012:1028