https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:19:25 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-04697 bdu:2020-04697 https://cve.radiocsirt.org/vuln/bdu:2020-04697 https://cve.radiocsirt.org/vuln/euvd-2026-49724 EUVD-2026-49724 https://cve.radiocsirt.org/vuln/euvd-2026-49724 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3805 <p>A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.</p> <p>A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-3805 https://cve.radiocsirt.org/vuln/ghsa-p2vr-qm33-hrfc <p>A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.</p> <p>A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.</p> https://cve.radiocsirt.org/vuln/ghsa-p2vr-qm33-hrfc https://cve.radiocsirt.org/vuln/gsd-2019-3805 gsd-2019-3805 https://cve.radiocsirt.org/vuln/gsd-2019-3805 https://cve.radiocsirt.org/vuln/rhsa-2019:1106 <p>jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis jackson-databind: improper polymorphic deserialization of types from Jodd-db library jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer jackson-databind: exfiltration/XXE in some JDK classes jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class wildfly: Race condition on PID file allows for termination of arbitrary processes by local users wildfly: wrong SecurityIdentity for EE concurrency threads that are reused</p> <p>jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis jackson-databind: improper polymorphic deserialization of types from Jodd-db library jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer jackson-databind: exfiltration/XXE in some JDK classes jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class wildfly: Race condition on PID file allows for termination of arbitrary processes by local users wildfly: wrong SecurityIdentity for EE concurrency threads that are reused</p> https://cve.radiocsirt.org/vuln/rhsa-2019:1106