Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:10:45 +0000 EUVD-2026-99242 https://cve.radiocsirt.org/vuln/euvd-2026-99242 EUVD-2026-99242 https://cve.radiocsirt.org/vuln/euvd-2026-99242 fkie_cve-2014-3490 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3490 <p>RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0818.</p> <p>RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0818.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3490 GHSA-qjpq-5pq3-43rr — Incorrect Privilege Assignment in RESTEasy https://cve.radiocsirt.org/vuln/ghsa-qjpq-5pq3-43rr <p><strong>Affected:</strong> Maven: org.jboss.resteasy:resteasy-client</p> <p>RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0818.</p> <p><strong>Affected:</strong> Maven: org.jboss.resteasy:resteasy-client</p> <p>RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0818.</p> https://cve.radiocsirt.org/vuln/ghsa-qjpq-5pq3-43rr gsd-2014-3490 https://cve.radiocsirt.org/vuln/gsd-2014-3490 gsd-2014-3490 https://cve.radiocsirt.org/vuln/gsd-2014-3490 RHSA-2014:1011 — Red Hat Security Advisory: resteasy-base security update https://cve.radiocsirt.org/vuln/rhsa-2014:1011 <p>RESTEasy: XXE via parameter entities</p> <p>RESTEasy: XXE via parameter entities</p> https://cve.radiocsirt.org/vuln/rhsa-2014:1011 RHSA-2014:1039 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.0 security update https://cve.radiocsirt.org/vuln/rhsa-2014:1039 <p>RESTEasy: XXE via parameter entities</p> <p>RESTEasy: XXE via parameter entities</p> https://cve.radiocsirt.org/vuln/rhsa-2014:1039 WID-SEC-W-2026-0180 — Dell Data Protection Advisor: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180