https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:29:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-99240 EUVD-2026-99240 https://cve.radiocsirt.org/vuln/euvd-2026-99240 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3472 <p>The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.3.0, does not properly check caller roles, which allows remote authenticated users to bypass access restrictions via unspecified vectors.</p> <p>The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.3.0, does not properly check caller roles, which allows remote authenticated users to bypass access restrictions via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3472 https://cve.radiocsirt.org/vuln/ghsa-x926-v8v9-j4mp <p>The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.3.0, does not properly check caller roles, which allows remote authenticated users to bypass access restrictions via unspecified vectors.</p> <p>The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.3.0, does not properly check caller roles, which allows remote authenticated users to bypass access restrictions via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-x926-v8v9-j4mp https://cve.radiocsirt.org/vuln/gsd-2014-3472 gsd-2014-3472 https://cve.radiocsirt.org/vuln/gsd-2014-3472 https://cve.radiocsirt.org/vuln/rhsa-2014:1019 <p>httpd: mod_deflate denial of service netty: DoS via memory exhaustion during data aggregation httpd: mod_status heap-based buffer overflow Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter httpd: mod_cgid denial of service WS: Incomplete fix for CVE-2013-2133 Security: Invalid EJB caller role check implementation</p> <p>httpd: mod_deflate denial of service netty: DoS via memory exhaustion during data aggregation httpd: mod_status heap-based buffer overflow Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter httpd: mod_cgid denial of service WS: Incomplete fix for CVE-2013-2133 Security: Invalid EJB caller role check implementation</p> https://cve.radiocsirt.org/vuln/rhsa-2014:1019