https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:48:02 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03992 bdu:2021-03992 https://cve.radiocsirt.org/vuln/bdu:2021-03992 https://cve.radiocsirt.org/vuln/bit-wildfly-2021-3644 <p><strong>Affected:</strong> Bitnami: wildfly</p> <p>A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly retrieve the item which was stored in the vault. The highest threat from this vulnerability is data confidentiality and integrity.</p> <p><strong>Affected:</strong> Bitnami: wildfly</p> <p>A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly retrieve the item which was stored in the vault. The highest threat from this vulnerability is data confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/bit-wildfly-2021-3644 https://cve.radiocsirt.org/vuln/euvd-2026-21038 EUVD-2026-21038 https://cve.radiocsirt.org/vuln/euvd-2026-21038 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3644 <p>A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly retrieve the item which was stored in the vault. The highest threat from this vulnerability is data confidentiality and integrity.</p> <p>A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly retrieve the item which was stored in the vault. The highest threat from this vulnerability is data confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3644 https://cve.radiocsirt.org/vuln/ghsa-w88m-2936-rmxr <p><strong>Affected:</strong> Maven: org.wildfly.core:wildfly-server</p> <p>A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly retrieve the item which was stored in the vault. The highest threat from this vulnerability is data confidentiality and integrity.</p> <p><strong>Affected:</strong> Maven: org.wildfly.core:wildfly-server</p> <p>A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly retrieve the item which was stored in the vault. The highest threat from this vulnerability is data confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/ghsa-w88m-2936-rmxr https://cve.radiocsirt.org/vuln/gsd-2021-3644 gsd-2021-3644 https://cve.radiocsirt.org/vuln/gsd-2021-3644 https://cve.radiocsirt.org/vuln/rhsa-2021:3466 <p>undertow: HTTP2SourceChannel fails to write final frame under some circumstances may lead to DoS wildfly-core: Invalid Sensitivity Classification of Vault Expression undertow: buffer leak on incoming websocket PONG message may lead to DoS jakarta-el: ELParserTokenManager enables invalid EL expressions to be evaluate apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6</p> <p>undertow: HTTP2SourceChannel fails to write final frame under some circumstances may lead to DoS wildfly-core: Invalid Sensitivity Classification of Vault Expression undertow: buffer leak on incoming websocket PONG message may lead to DoS jakarta-el: ELParserTokenManager enables invalid EL expressions to be evaluate apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6</p> https://cve.radiocsirt.org/vuln/rhsa-2021:3466 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0607 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0607