Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:32:54 +0000 EUVD-2026-229144 https://cve.radiocsirt.org/vuln/euvd-2026-229144 EUVD-2026-229144 https://cve.radiocsirt.org/vuln/euvd-2026-229144 fkie_cve-2022-4147 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4147 <p>Quarkus CORS filter allows simple GET and POST requests with invalid Origin to proceed. Simple GET or POST requests made with XMLHttpRequest are the ones which have no event listeners registered on the object returned by the XMLHttpRequest upload property and have no ReadableStream object used in the request.</p> <p>Quarkus CORS filter allows simple GET and POST requests with invalid Origin to proceed. Simple GET or POST requests made with XMLHttpRequest are the ones which have no event listeners registered on the object returned by the XMLHttpRequest upload property and have no ReadableStream object used in the request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-4147 GHSA-9895-g6x5-xwcp — Quarkus CORS filter allows simple GET and POST requests with an invalid Origin to proceed https://cve.radiocsirt.org/vuln/ghsa-9895-g6x5-xwcp <p><strong>Affected:</strong> Maven: io.quarkus:quarkus-vertx-http</p> <p>Quarkus CORS filter allows simple GET and POST requests with invalid Origin to proceed. Simple GET or POST requests made with XMLHttpRequest are the ones which have no event listeners registered on the object returned by the XMLHttpRequest upload property and have no ReadableStream object used in the request.</p> <p><strong>Affected:</strong> Maven: io.quarkus:quarkus-vertx-http</p> <p>Quarkus CORS filter allows simple GET and POST requests with invalid Origin to proceed. Simple GET or POST requests made with XMLHttpRequest are the ones which have no event listeners registered on the object returned by the XMLHttpRequest upload property and have no ReadableStream object used in the request.</p> https://cve.radiocsirt.org/vuln/ghsa-9895-g6x5-xwcp gsd-2022-4147 https://cve.radiocsirt.org/vuln/gsd-2022-4147 gsd-2022-4147 https://cve.radiocsirt.org/vuln/gsd-2022-4147 RHSA-2022:8957 — Red Hat Security Advisory: Red Hat build of Quarkus Platform 2.7.6.SP3 and security update https://cve.radiocsirt.org/vuln/rhsa-2022:8957 <p>quarkus_dev_ui: Dev UI Config Editor is vulnerable to drive-by localhost attacks leading to RCE quarkus-vertx-http: Security misconfiguration of CORS : OWASP A05_2021 level in Quarkus mina-sshd: Java unsafe deserialization vulnerability</p> <p>quarkus_dev_ui: Dev UI Config Editor is vulnerable to drive-by localhost attacks leading to RCE quarkus-vertx-http: Security misconfiguration of CORS : OWASP A05_2021 level in Quarkus mina-sshd: Java unsafe deserialization vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2022:8957 WID-SEC-W-2022-2302 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2302 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen und Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen und Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2302