https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:33:55 +0000 https://cve.radiocsirt.org/vuln/certa-2011-avi-401 certa-2011-avi-401 https://cve.radiocsirt.org/vuln/certa-2011-avi-401 https://cve.radiocsirt.org/vuln/euvd-2026-115362 EUVD-2026-115362 https://cve.radiocsirt.org/vuln/euvd-2026-115362 https://cve.radiocsirt.org/vuln/fkie_cve-2011-2196 <p>jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484.</p> <p>jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-2196 https://cve.radiocsirt.org/vuln/ghsa-6m4p-jvxh-733r <p>jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484.</p> <p>jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484.</p> https://cve.radiocsirt.org/vuln/ghsa-6m4p-jvxh-733r https://cve.radiocsirt.org/vuln/gsd-2011-2196 gsd-2011-2196 https://cve.radiocsirt.org/vuln/gsd-2011-2196 https://cve.radiocsirt.org/vuln/rhsa-2011:0945 <p>JBoss Seam EL interpolation in exception handling</p> <p>JBoss Seam EL interpolation in exception handling</p> https://cve.radiocsirt.org/vuln/rhsa-2011:0945