https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:18:17.398873+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-109489 EUVD-2026-109489 2026-10-03T07:18:17.472445+00:00 EUVD-2026-109489 https://cve.radiocsirt.org/vuln/fkie_cve-2012-0213 fkie_cve-2012-0213 2026-10-03T07:18:17.472483+00:00

The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.

 https://cve.radiocsirt.org/vuln/ghsa-jqx5-h2hw-5q4f GHSA-jqx5-h2hw-5q4f — Denial of Service in Apache POI 2026-10-03T07:18:17.472519+00:00

Affected: Maven: org.apache.poi:poi, Maven: org.apache.poi:poi-scratchpad

The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.

 https://cve.radiocsirt.org/vuln/gsd-2012-0213 gsd-2012-0213 2026-10-03T07:18:17.472548+00:00 gsd-2012-0213 https://cve.radiocsirt.org/vuln/rhsa-2012:1232 RHSA-2012:1232 — Red Hat Security Advisory: JBoss Enterprise Portal Platform 5.2.2 update 2026-10-03T07:18:17.472561+00:00

JDK: XML parsing Denial-Of-Service (6845701) CSRF on jmx-console allows invocation of operations on mbeans JNDI: unauthenticated remote write access is permitted by default jakarta: JVM destabilization due to memory exhaustion when processing CDF/CFBF files JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm JGroups diagnostics service enabled by default with no authentication when a JGroups channel is started

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 WID-SEC-W-2026-0180 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-03T07:18:17.472592+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.