Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 16:00:53 +0000 bdu:2023-00724 https://cve.radiocsirt.org/vuln/bdu:2023-00724 bdu:2023-00724 https://cve.radiocsirt.org/vuln/bdu:2023-00724 cnvd-2017-33724 https://cve.radiocsirt.org/vuln/cnvd-2017-33724 cnvd-2017-33724 https://cve.radiocsirt.org/vuln/cnvd-2017-33724 EUVD-2026-351857 https://cve.radiocsirt.org/vuln/euvd-2026-351857 EUVD-2026-351857 https://cve.radiocsirt.org/vuln/euvd-2026-351857 fkie_cve-2017-12149 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12149 <p>In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.</p> <p>In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-12149 GHSA-j5r3-wq62-8gp5 https://cve.radiocsirt.org/vuln/ghsa-j5r3-wq62-8gp5 <p>In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.</p> <p>In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.</p> https://cve.radiocsirt.org/vuln/ghsa-j5r3-wq62-8gp5 gsd-2017-12149 https://cve.radiocsirt.org/vuln/gsd-2017-12149 gsd-2017-12149 https://cve.radiocsirt.org/vuln/gsd-2017-12149 RHSA-2018:1607 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2 security update https://cve.radiocsirt.org/vuln/rhsa-2018:1607 <p>jbossas: Arbitrary code execution via unrestricted deserialization in ReadOnlyAccessFilter of HTTP Invoker.</p> <p>jbossas: Arbitrary code execution via unrestricted deserialization in ReadOnlyAccessFilter of HTTP Invoker.</p> https://cve.radiocsirt.org/vuln/rhsa-2018:1607