https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:27:20.102685+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-096 certfr-2014-avi-096 — Une vulnérabilité a été corrigée dans <span class="textit">IBM Rational Tester</span>. Elle permet à un attaquant de pr… 2026-10-02T20:27:20.237749+00:00 certfr-2014-avi-096 https://cve.radiocsirt.org/vuln/euvd-2026-108625 EUVD-2026-108625 2026-10-02T20:27:20.237801+00:00 EUVD-2026-108625 https://cve.radiocsirt.org/vuln/fkie_cve-2013-6440 fkie_cve-2013-6440 2026-10-02T20:27:20.237816+00:00

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.

 https://cve.radiocsirt.org/vuln/ghsa-v723-58jv-2qc4 GHSA-v723-58jv-2qc4 — Exposure of Sensitive Information to an Unauthorized Actor in OpenSAML 2026-10-02T20:27:20.237848+00:00

Affected: Maven: org.opensaml:opensaml

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.

 https://cve.radiocsirt.org/vuln/gsd-2013-6440 gsd-2013-6440 2026-10-02T20:27:20.237873+00:00 gsd-2013-6440 https://cve.radiocsirt.org/vuln/rhsa-2014:0170 RHSA-2014:0170 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.1 update 2026-10-02T20:27:20.237886+00:00

Java: Java XML Signature DoS Attack Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter jboss-as-server: Unchecked access to MSC Service Registry under JSM