https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 01:33:33 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-21585 EUVD-2026-21585 https://cve.radiocsirt.org/vuln/euvd-2026-21585 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20250 <p>A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.</p> <p>A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-20250 https://cve.radiocsirt.org/vuln/ghsa-2259-h742-5vr4 <p><strong>Affected:</strong> Maven: org.jboss:jboss-ejb-client</p> <p>A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.</p> <p><strong>Affected:</strong> Maven: org.jboss:jboss-ejb-client</p> <p>A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.</p> https://cve.radiocsirt.org/vuln/ghsa-2259-h742-5vr4 https://cve.radiocsirt.org/vuln/gsd-2021-20250 gsd-2021-20250 https://cve.radiocsirt.org/vuln/gsd-2021-20250 https://cve.radiocsirt.org/vuln/rhsa-2021:0872 <p>guava: local information disclosure via temporary directory created with unsafe permissions Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible jboss-remoting: Threads hold up forever in the EJB server by suppressing the ack from an EJB client undertow: Possible regression in fix for CVE-2020-10687 wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client</p> <p>guava: local information disclosure via temporary directory created with unsafe permissions Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible jboss-remoting: Threads hold up forever in the EJB server by suppressing the ack from an EJB client undertow: Possible regression in fix for CVE-2020-10687 wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client</p> https://cve.radiocsirt.org/vuln/rhsa-2021:0872 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1272 <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial-of-Service-Zustand auslösen, Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder einen Cross-Site-Scripting-Angriff durchführen.</p> <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial-of-Service-Zustand auslösen, Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder einen Cross-Site-Scripting-Angriff durchführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1272