https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 04:52:37 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-23613 cnvd-2018-23613 https://cve.radiocsirt.org/vuln/cnvd-2018-23613 https://cve.radiocsirt.org/vuln/euvd-2026-256266 EUVD-2026-256266 https://cve.radiocsirt.org/vuln/euvd-2026-256266 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14667 <p>The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.</p> <p>The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-14667 https://cve.radiocsirt.org/vuln/ghsa-j7mw-7crr-658v <p><strong>Affected:</strong> Maven: org.richfaces:richfaces-core</p> <p>The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via `org.ajax4jsf.resource.UserResource$UriData`.</p> <p><strong>Affected:</strong> Maven: org.richfaces:richfaces-core</p> <p>The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via `org.ajax4jsf.resource.UserResource$UriData`.</p> https://cve.radiocsirt.org/vuln/ghsa-j7mw-7crr-658v https://cve.radiocsirt.org/vuln/gsd-2018-14667 gsd-2018-14667 https://cve.radiocsirt.org/vuln/gsd-2018-14667 https://cve.radiocsirt.org/vuln/rhsa-2018:3517 <p>RichFaces: Expression Language injection via UserResource allows for unauthenticated remote code execution</p> <p>RichFaces: Expression Language injection via UserResource allows for unauthenticated remote code execution</p> https://cve.radiocsirt.org/vuln/rhsa-2018:3517 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2511 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2511