https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:19:05 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-02712 cnvd-2015-02712 https://cve.radiocsirt.org/vuln/cnvd-2015-02712 https://cve.radiocsirt.org/vuln/euvd-2026-102994 EUVD-2026-102994 https://cve.radiocsirt.org/vuln/euvd-2026-102994 https://cve.radiocsirt.org/vuln/fkie_cve-2014-8125 <p>XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.</p> <p>XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-8125 https://cve.radiocsirt.org/vuln/ghsa-6qx9-rf9g-7jmr <p><strong>Affected:</strong> Maven: org.drools:drools-core, Maven: org.jbpm:jbpm-bpmn2</p> <p>XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.</p> <p><strong>Affected:</strong> Maven: org.drools:drools-core, Maven: org.jbpm:jbpm-bpmn2</p> <p>XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.</p> https://cve.radiocsirt.org/vuln/ghsa-6qx9-rf9g-7jmr https://cve.radiocsirt.org/vuln/gsd-2014-8125 gsd-2014-8125 https://cve.radiocsirt.org/vuln/gsd-2014-8125 https://cve.radiocsirt.org/vuln/rhsa-2015:0850 <p>CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix WS: EJB3 role restrictions are not applied to jaxws handlers Java: Java XML Signature DoS Attack async-http-client: SSL/TLS certificate verification is disabled under certain conditions async-http-client: missing hostname verification for SSL certificates CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy JBossSX/PicketBox: World readable audit.log file CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods Security: Wrong security context loaded when using SAML2 STS Login Module RESTeasy: External entities expanded by DocumentProvider Weld: Limited information disclosure via stale thread state jBPM: BPMN2 file processing XXE in Process Execution</p> <p>CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix WS: EJB3 role restrictions are not applied to jaxws handlers Java: Java XML Signature DoS Attack async-http-client: SSL/TLS certificate verification is disabled under certain conditions async-http-client: missing hostname verification for SSL certificates CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy JBossSX/PicketBox: World readable audit.log file CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods Security: Wrong security context loaded when using SAML2 STS Login Module RESTeasy: External entities expanded by DocumentProvider Weld: Limited information disclosure via stale thread state jBPM: BPMN2 file processing XXE in Process Execution</p> https://cve.radiocsirt.org/vuln/rhsa-2015:0850 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180