https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:58:24.512787+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-06636 bdu:2022-06636 2026-10-03T02:58:24.695111+00:00 bdu:2022-06636 https://cve.radiocsirt.org/vuln/certa-2013-avi-575 certa-2013-avi-575 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle Fusion Middleware</span>. Certaines d'en… 2026-10-03T02:58:24.695152+00:00 certa-2013-avi-575 https://cve.radiocsirt.org/vuln/euvd-2026-106033 EUVD-2026-106033 2026-10-03T02:58:24.695173+00:00 EUVD-2026-106033 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2172 fkie_cve-2013-2172 2026-10-03T02:58:24.695184+00:00

jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization algorithm to apply to the SignedInfo part of the Signature."

 https://cve.radiocsirt.org/vuln/ghsa-r237-w2w6-jq3p GHSA-r237-w2w6-jq3p — Inefficient Algorithmic Complexity in Apache Santuario XML Security 2026-10-03T02:58:24.695233+00:00

Affected: Maven: org.apache.santuario:xmlsec

`jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java` in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization algorithm to apply to the SignedInfo part of the Signature."

 https://cve.radiocsirt.org/vuln/gsd-2013-2172 gsd-2013-2172 2026-10-03T02:58:24.695268+00:00 gsd-2013-2172 https://cve.radiocsirt.org/vuln/rhsa-2013:1207 RHSA-2013:1207 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.1.1 update 2026-10-03T02:58:24.695281+00:00

httpd: multiple XSS flaws due to unescaped hostnames httpd: XSS flaw in mod_proxy_balancer manager interface httpd: mod_rewrite allows terminal escape sequences to be written to the log file httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav PicketBox: Insecure storage of masked passwords Java: XML signature spoofing JGroups: Authentication via cached credentials Bayeux: Reflected Cross-Site Scripting (XSS)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-2172 Withdrawn: UBUNTU-CVE-2013-2172 2026-10-03T02:58:24.695310+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: libxml-security-java

jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization algorithm to apply to the SignedInfo part of the Signature."

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1738 WID-SEC-W-2022-1738 — IBM InfoSphere Information Server: Mehrere Schwachstellen 2026-10-03T02:58:24.695331+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.