https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:41:34 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-04804 bdu:2020-04804 https://cve.radiocsirt.org/vuln/bdu:2020-04804 https://cve.radiocsirt.org/vuln/euvd-2026-49793 EUVD-2026-49793 https://cve.radiocsirt.org/vuln/euvd-2026-49793 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3894 <p>It was discovered that the ElytronManagedThread in Wildfly&#39;s Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run the thread as. These threads do not necessarily terminate if the keep alive time has not expired. This could allow a shared thread to use the wrong security identity when executing.</p> <p>It was discovered that the ElytronManagedThread in Wildfly&#39;s Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run the thread as. These threads do not necessarily terminate if the keep alive time has not expired. This could allow a shared thread to use the wrong security identity when executing.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-3894 https://cve.radiocsirt.org/vuln/ghsa-7hpw-qq87-9462 <p>It was discovered that the ElytronManagedThread in Wildfly&#39;s Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run the thread as. These threads do not necessarily terminate if the keep alive time has not expired. This could allow a shared thread to use the wrong security identity when executing.</p> <p>It was discovered that the ElytronManagedThread in Wildfly&#39;s Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run the thread as. These threads do not necessarily terminate if the keep alive time has not expired. This could allow a shared thread to use the wrong security identity when executing.</p> https://cve.radiocsirt.org/vuln/ghsa-7hpw-qq87-9462 https://cve.radiocsirt.org/vuln/gsd-2019-3894 gsd-2019-3894 https://cve.radiocsirt.org/vuln/gsd-2019-3894 https://cve.radiocsirt.org/vuln/rhsa-2019:1106 <p>jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis jackson-databind: improper polymorphic deserialization of types from Jodd-db library jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer jackson-databind: exfiltration/XXE in some JDK classes jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class wildfly: Race condition on PID file allows for termination of arbitrary processes by local users wildfly: wrong SecurityIdentity for EE concurrency threads that are reused</p> <p>jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis jackson-databind: improper polymorphic deserialization of types from Jodd-db library jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer jackson-databind: exfiltration/XXE in some JDK classes jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class wildfly: Race condition on PID file allows for termination of arbitrary processes by local users wildfly: wrong SecurityIdentity for EE concurrency threads that are reused</p> https://cve.radiocsirt.org/vuln/rhsa-2019:1106