https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:27:59.611555+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-365 certfr-2014-avi-365 — Une vulnérabilité a été corrigée dans <span class="textit">Red Hat JBoss</span>. Elle permet à un attaquant de provoque… 2026-10-03T11:28:00.207105+00:00 certfr-2014-avi-365 https://cve.radiocsirt.org/vuln/euvd-2026-109170 EUVD-2026-109170 2026-10-03T11:28:00.207170+00:00 EUVD-2026-109170 https://cve.radiocsirt.org/vuln/fkie_cve-2013-7285 fkie_cve-2013-7285 2026-10-03T11:28:00.207194+00:00

Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON.

 https://cve.radiocsirt.org/vuln/ghsa-f554-x222-wgf7 GHSA-f554-x222-wgf7 — Command Injection in Xstream 2026-10-03T11:28:00.207256+00:00

Affected: Maven: com.thoughtworks.xstream:xstream

Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON.

 https://cve.radiocsirt.org/vuln/gsd-2013-7285 gsd-2013-7285 2026-10-03T11:28:00.207300+00:00 gsd-2013-7285 https://cve.radiocsirt.org/vuln/rhsa-2014:0216 RHSA-2014:0216 — Red Hat Security Advisory: XStream security update 2026-10-03T11:28:00.207329+00:00

XStream: remote code execution due to insecure XML deserialization

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-7285 UBUNTU-CVE-2013-7285 2026-10-03T11:28:00.207366+00:00

Affected: Ubuntu:14.04:LTS: libxstream-java

Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen 2026-10-03T11:28:00.207392+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.