https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 04:23:27 +0000 https://cve.radiocsirt.org/vuln/certfr-2020-avi-384 certfr-2020-avi-384 https://cve.radiocsirt.org/vuln/certfr-2020-avi-384 https://cve.radiocsirt.org/vuln/cnvd-2015-02050 cnvd-2015-02050 https://cve.radiocsirt.org/vuln/cnvd-2015-02050 https://cve.radiocsirt.org/vuln/euvd-2026-89260 EUVD-2026-89260 https://cve.radiocsirt.org/vuln/euvd-2026-89260 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0279 <p>JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.</p> <p>JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-0279 https://cve.radiocsirt.org/vuln/ghsa-8cc3-p77g-5pcc <p>JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.</p> <p>JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-8cc3-p77g-5pcc https://cve.radiocsirt.org/vuln/gsd-2015-0279 gsd-2015-0279 https://cve.radiocsirt.org/vuln/gsd-2015-0279 https://cve.radiocsirt.org/vuln/jvndb-2015-001959 <p>JBoss RichFaces contains a remote Java code execution vulnerability. JBoss RichFaces is an Ajax-enabled component library for JavaServer Faces (JSF). JBoss RichFaces contains a flaw in parsing the do parameter, which may result in arbitrary Java code execution. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>JBoss RichFaces contains a remote Java code execution vulnerability. JBoss RichFaces is an Ajax-enabled component library for JavaServer Faces (JSF). JBoss RichFaces contains a flaw in parsing the do parameter, which may result in arbitrary Java code execution. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2015-001959 https://cve.radiocsirt.org/vuln/rhsa-2015:0719 <p>RichFaces: Remote Command Execution via insufficient EL parameter sanitization</p> <p>RichFaces: Remote Command Execution via insufficient EL parameter sanitization</p> https://cve.radiocsirt.org/vuln/rhsa-2015:0719