Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:51:35 +0000 EUVD-2026-99282 https://cve.radiocsirt.org/vuln/euvd-2026-99282 EUVD-2026-99282 https://cve.radiocsirt.org/vuln/euvd-2026-99282 fkie_cve-2014-3530 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3530 <p>The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote attackers to read arbitrary code and possibly have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue.</p> <p>The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote attackers to read arbitrary code and possibly have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3530 GHSA-2c9q-qwrc-f486 — XML External Entity Reference in org.picketlink:picketlink-common https://cve.radiocsirt.org/vuln/ghsa-2c9q-qwrc-f486 <p><strong>Affected:</strong> Maven: org.picketlink:picketlink-common</p> <p>The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote attackers to read arbitrary code and possibly have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue.</p> <p><strong>Affected:</strong> Maven: org.picketlink:picketlink-common</p> <p>The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote attackers to read arbitrary code and possibly have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue.</p> https://cve.radiocsirt.org/vuln/ghsa-2c9q-qwrc-f486 gsd-2014-3530 https://cve.radiocsirt.org/vuln/gsd-2014-3530 gsd-2014-3530 https://cve.radiocsirt.org/vuln/gsd-2014-3530 RHSA-2014:0883 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.4 security update https://cve.radiocsirt.org/vuln/rhsa-2014:0883 <p>PicketLink: XXE via insecure DocumentBuilderFactory usage</p> <p>PicketLink: XXE via insecure DocumentBuilderFactory usage</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0883