Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:12:45 +0000 EUVD-2026-99267 https://cve.radiocsirt.org/vuln/euvd-2026-99267 EUVD-2026-99267 https://cve.radiocsirt.org/vuln/euvd-2026-99267 fkie_cve-2014-3481 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3481 <p>org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform (JEAP) before 6.2.4 enables entity expansion, which allows remote attackers to read arbitrary files via unspecified vectors, related to an XML External Entity (XXE) issue.</p> <p>org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform (JEAP) before 6.2.4 enables entity expansion, which allows remote attackers to read arbitrary files via unspecified vectors, related to an XML External Entity (XXE) issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3481 GHSA-xm6x-8fqh-w3x3 https://cve.radiocsirt.org/vuln/ghsa-xm6x-8fqh-w3x3 <p>org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform (JEAP) before 6.2.4 enables entity expansion, which allows remote attackers to read arbitrary files via unspecified vectors, related to an XML External Entity (XXE) issue.</p> <p>org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform (JEAP) before 6.2.4 enables entity expansion, which allows remote attackers to read arbitrary files via unspecified vectors, related to an XML External Entity (XXE) issue.</p> https://cve.radiocsirt.org/vuln/ghsa-xm6x-8fqh-w3x3 gsd-2014-3481 https://cve.radiocsirt.org/vuln/gsd-2014-3481 gsd-2014-3481 https://cve.radiocsirt.org/vuln/gsd-2014-3481 RHSA-2014:0797 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.4 update https://cve.radiocsirt.org/vuln/rhsa-2014:0797 <p>CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill JAX-RS: Information disclosure via XML eXternal Entity (XXE)</p> <p>CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill JAX-RS: Information disclosure via XML eXternal Entity (XXE)</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0797