https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:16:19 +0000 https://cve.radiocsirt.org/vuln/certfr-2018-avi-026 certfr-2018-avi-026 https://cve.radiocsirt.org/vuln/certfr-2018-avi-026 https://cve.radiocsirt.org/vuln/cnvd-2016-04393 cnvd-2016-04393 https://cve.radiocsirt.org/vuln/cnvd-2016-04393 https://cve.radiocsirt.org/vuln/euvd-2026-82795 EUVD-2026-82795 https://cve.radiocsirt.org/vuln/euvd-2026-82795 https://cve.radiocsirt.org/vuln/fkie_cve-2016-2141 <p>It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.</p> <p>It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-2141 https://cve.radiocsirt.org/vuln/ghsa-rc7h-x6cq-988q <p><strong>Affected:</strong> Maven: org.jgroups:jgroups</p> <p>JGroups before 4.0 does not require the proper headers for the ENCRYPT and AUTH protocols from nodes joining the cluster, which allows remote attackers to bypass security restrictions and send and receive messages within the cluster via unspecified vectors. Fixes for this issue have been backported to versions 3.6.10.Final and 3.2.16.Final.</p> <p><strong>Affected:</strong> Maven: org.jgroups:jgroups</p> <p>JGroups before 4.0 does not require the proper headers for the ENCRYPT and AUTH protocols from nodes joining the cluster, which allows remote attackers to bypass security restrictions and send and receive messages within the cluster via unspecified vectors. Fixes for this issue have been backported to versions 3.6.10.Final and 3.2.16.Final.</p> https://cve.radiocsirt.org/vuln/ghsa-rc7h-x6cq-988q https://cve.radiocsirt.org/vuln/gsd-2016-2141 gsd-2016-2141 https://cve.radiocsirt.org/vuln/gsd-2016-2141 https://cve.radiocsirt.org/vuln/rhsa-2016:1328 <p>JGroups: Authorization bypass</p> <p>JGroups: Authorization bypass</p> https://cve.radiocsirt.org/vuln/rhsa-2016:1328 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2141 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libjgroups-java, Ubuntu:18.04:LTS: libjgroups-java, Ubuntu:20.04:LTS: libjgroups-java, Ubuntu:22.04:LTS: libjgroups-java, Ubuntu:24.04:LTS: libjgroups-java, Ubuntu:25.10: libjgroups-java, Ubuntu:26.04:LTS: libjgroups-java</p> <p>It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libjgroups-java, Ubuntu:18.04:LTS: libjgroups-java, Ubuntu:20.04:LTS: libjgroups-java, Ubuntu:22.04:LTS: libjgroups-java, Ubuntu:24.04:LTS: libjgroups-java, Ubuntu:25.10: libjgroups-java, Ubuntu:26.04:LTS: libjgroups-java</p> <p>It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2141 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3616 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Fuse und Red Hat JBoss A-MQ ausnutzen, um einen Denial of Service Angriff durchzuführen, Code mit den Privilegien des angegriffenen Dienstes zur Ausführung bringen, vertrauliche Daten einzusehen, Informationen zu manipulieren oder Sicherheitsmechanismen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Fuse und Red Hat JBoss A-MQ ausnutzen, um einen Denial of Service Angriff durchzuführen, Code mit den Privilegien des angegriffenen Dienstes zur Ausführung bringen, vertrauliche Daten einzusehen, Informationen zu manipulieren oder Sicherheitsmechanismen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3616