https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:24:18 +0000 https://cve.radiocsirt.org/vuln/bit-wildfly-2020-1719 <p><strong>Affected:</strong> Bitnami: wildfly</p> <p>A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.</p> <p><strong>Affected:</strong> Bitnami: wildfly</p> <p>A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.</p> https://cve.radiocsirt.org/vuln/bit-wildfly-2020-1719 https://cve.radiocsirt.org/vuln/euvd-2026-35566 EUVD-2026-35566 https://cve.radiocsirt.org/vuln/euvd-2026-35566 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1719 <p>A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.</p> <p>A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-1719 https://cve.radiocsirt.org/vuln/ghsa-p9cf-qjxq-vxw6 <p><strong>Affected:</strong> Maven: org.wildfly.bom:wildfly</p> <p>A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.</p> <p><strong>Affected:</strong> Maven: org.wildfly.bom:wildfly</p> <p>A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.</p> https://cve.radiocsirt.org/vuln/ghsa-p9cf-qjxq-vxw6 https://cve.radiocsirt.org/vuln/gsd-2020-1719 gsd-2020-1719 https://cve.radiocsirt.org/vuln/gsd-2020-1719 https://cve.radiocsirt.org/vuln/rhsa-2020:2058 <p>jackson-mapper-asl: XML external entity similar to CVE-2016-3720 cxf: OpenId Connect token service does not properly validate the clientId cxf: reflected XSS in the services listing page Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader Soteria: security identity corruption across concurrent threads undertow: AJP File Read/Inclusion Vulnerability undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass cryptacular: excessive memory allocation during a decode operation undertow: Memory exhaustion issue in HttpReadListener via &#34;Expect: 100-continue&#34; header undertow: invalid HTTP request with large chunk size</p> <p>jackson-mapper-asl: XML external entity similar to CVE-2016-3720 cxf: OpenId Connect token service does not properly validate the clientId cxf: reflected XSS in the services listing page Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader Soteria: security identity corruption across concurrent threads undertow: AJP File Read/Inclusion Vulnerability undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass cryptacular: excessive memory allocation during a decode operation undertow: Memory exhaustion issue in HttpReadListener via &#34;Expect: 100-continue&#34; header undertow: invalid HTTP request with large chunk size</p> https://cve.radiocsirt.org/vuln/rhsa-2020:2058 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2123 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Angriff durchzuführen, einen Denial of Service Zustand herbeizuführen, Informationen offenzulegen oder Dateien zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Angriff durchzuführen, einen Denial of Service Zustand herbeizuführen, Informationen offenzulegen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2123