https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:36:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-112526 EUVD-2026-112526 https://cve.radiocsirt.org/vuln/euvd-2026-112526 https://cve.radiocsirt.org/vuln/fkie_cve-2012-4572 <p>Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization module for a new application when an implementation is already loaded and the modules share class names, which allows local users to control certain applications&#39; authorization decisions via a crafted application.</p> <p>Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization module for a new application when an implementation is already loaded and the modules share class names, which allows local users to control certain applications&#39; authorization decisions via a crafted application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-4572 https://cve.radiocsirt.org/vuln/ghsa-w8gr-4mrr-7j77 <p>Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization module for a new application when an implementation is already loaded and the modules share class names, which allows local users to control certain applications&#39; authorization decisions via a crafted application.</p> <p>Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization module for a new application when an implementation is already loaded and the modules share class names, which allows local users to control certain applications&#39; authorization decisions via a crafted application.</p> https://cve.radiocsirt.org/vuln/ghsa-w8gr-4mrr-7j77 https://cve.radiocsirt.org/vuln/gsd-2012-4572 gsd-2012-4572 https://cve.radiocsirt.org/vuln/gsd-2012-4572 https://cve.radiocsirt.org/vuln/rhsa-2013:0833 <p>Web: jsessionid exposed via encoded url when using cookie based session tracking JBoss: custom authorization module implementations shared between applications apache-cxf: XML encryption backwards compatibility attacks openssl: DoS due to improper handling of OCSP response verification SSL/TLS: CBC padding timing attack (lucky-13) Installer: Generated auto-install xml is world readable tomcat: Session fixation in form authenticator</p> <p>Web: jsessionid exposed via encoded url when using cookie based session tracking JBoss: custom authorization module implementations shared between applications apache-cxf: XML encryption backwards compatibility attacks openssl: DoS due to improper handling of OCSP response verification SSL/TLS: CBC padding timing attack (lucky-13) Installer: Generated auto-install xml is world readable tomcat: Session fixation in form authenticator</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0833