EUVD-2025-23982

Malicious code in bioql PyPI...

EUVD-2022-4022

Malicious code in bioql PyPI...

EUVD-2022-3693

Malicious code in bioql PyPI...

EUVD-2022-5322

Malicious code in bioql PyPI...

EUVD-2022-4142

Malicious code in bioql PyPI...

EUVD-2022-5744

Malicious code in bioql PyPI...

EUVD-2022-0979

Malicious code in bioql PyPI...

EUVD-2024-3074

Malicious code in bioql PyPI...

EUVD-2022-4683

Malicious code in bioql PyPI...

EUVD-2022-2671

Malicious code in bioql PyPI...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.9 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability

A flaw was found in org.apache.cxf/cxf, where untrusted users can configure JMS to allow the specification of RMI or LDAP URLs, possibly leading to code execution. This vulnerability allows an attacker to provide malicious protocol URLs during JMS configuration...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.9 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability

A flaw was found in org.apache.cxf/cxf, where untrusted users can configure JMS to allow the specification of RMI or LDAP URLs, possibly leading to code execution. This vulnerability allows an attacker to provide malicious protocol URLs during JMS configuration...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.0 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability

A flaw was found in org.apache.cxf/cxf, where untrusted users can configure JMS to allow the specification of RMI or LDAP URLs, possibly leading to code execution. This vulnerability allows an attacker to provide malicious protocol URLs during JMS configuration...

RHEL 8 / 9 : Red Hat JBoss Enterprise Application Platform 8.1.0 (RHSA-2025:17298)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17298 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This...

Security Bulletin:IBM WebSphere Application Server Liberty shipped with IBM OpenPages is vulnerable to a denial of service due to Apache CXF (CVE-2025-23184)

Summary IBM WebSphere Application Server Liberty is shipped as a supporting program of IBM OpenPages. Information about a denial of service due to Apache CXF vulnerability affecting IBM WebSphere Application Server Liberty has been published in a security bulletin. These products have addressed t...

Remote Code Execution (RCE)

org.apache.cxf:cxf-rt-transports-jms is vulnerable to Remote Code Execution RCE. The vulnerability is due to allowing untrusted users to configure JMS with RMI or LDAP URLs, which could be abused for code execution...

The vulnerability of the CachedOutputStream function in the Apache CXF web service framework allows a attacker to cause a service failure.

The vulnerability of the CachedOutputStream function in the Apache CXF web service framework is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...