https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:33:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-35556 EUVD-2026-35556 https://cve.radiocsirt.org/vuln/euvd-2026-35556 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1729 <p>A flaw was found in SmallRye&#39;s API through version 1.6.1. The API can allow other code running within the application server to potentially obtain the ClassLoader, bypassing any permissions checks that should have been applied. The largest threat from this vulnerability is a threat to data confidentiality. This is fixed in SmallRye 1.6.2</p> <p>A flaw was found in SmallRye&#39;s API through version 1.6.1. The API can allow other code running within the application server to potentially obtain the ClassLoader, bypassing any permissions checks that should have been applied. The largest threat from this vulnerability is a threat to data confidentiality. This is fixed in SmallRye 1.6.2</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-1729 https://cve.radiocsirt.org/vuln/ghsa-54fx-gm74-q676 <p><strong>Affected:</strong> Maven: io.smallrye.config:smallrye-config</p> <p>A flaw was found in SmallRye&#39;s API through version 1.6.1. The API can allow other code running within the application server to potentially obtain the ClassLoader, bypassing any permissions checks that should have been applied. The largest threat from this vulnerability is a threat to data confidentiality. This is fixed in SmallRye 1.6.2</p> <p><strong>Affected:</strong> Maven: io.smallrye.config:smallrye-config</p> <p>A flaw was found in SmallRye&#39;s API through version 1.6.1. The API can allow other code running within the application server to potentially obtain the ClassLoader, bypassing any permissions checks that should have been applied. The largest threat from this vulnerability is a threat to data confidentiality. This is fixed in SmallRye 1.6.2</p> https://cve.radiocsirt.org/vuln/ghsa-54fx-gm74-q676 https://cve.radiocsirt.org/vuln/gsd-2020-1729 gsd-2020-1729 https://cve.radiocsirt.org/vuln/gsd-2020-1729 https://cve.radiocsirt.org/vuln/rhsa-2020:2058 <p>jackson-mapper-asl: XML external entity similar to CVE-2016-3720 cxf: OpenId Connect token service does not properly validate the clientId cxf: reflected XSS in the services listing page Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader Soteria: security identity corruption across concurrent threads undertow: AJP File Read/Inclusion Vulnerability undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass cryptacular: excessive memory allocation during a decode operation undertow: Memory exhaustion issue in HttpReadListener via &#34;Expect: 100-continue&#34; header undertow: invalid HTTP request with large chunk size</p> <p>jackson-mapper-asl: XML external entity similar to CVE-2016-3720 cxf: OpenId Connect token service does not properly validate the clientId cxf: reflected XSS in the services listing page Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader Soteria: security identity corruption across concurrent threads undertow: AJP File Read/Inclusion Vulnerability undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass cryptacular: excessive memory allocation during a decode operation undertow: Memory exhaustion issue in HttpReadListener via &#34;Expect: 100-continue&#34; header undertow: invalid HTTP request with large chunk size</p> https://cve.radiocsirt.org/vuln/rhsa-2020:2058 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2123 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Angriff durchzuführen, einen Denial of Service Zustand herbeizuführen, Informationen offenzulegen oder Dateien zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Angriff durchzuführen, einen Denial of Service Zustand herbeizuführen, Informationen offenzulegen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2123