https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:11:53.806378+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T05:11:53.817672+00:00 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/euvd-2026-99413 EUVD-2026-99413 2026-10-03T05:11:53.817727+00:00 EUVD-2026-99413 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3578 fkie_cve-2014-3578 2026-10-03T05:11:53.817750+00:00

Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-rhcg-rwhx-qj3j GHSA-rhcg-rwhx-qj3j — Improper Limitation of a Pathname to a Restricted Directory in Spring Framework 2026-10-03T05:11:53.817801+00:00

Affected: Maven: org.springframework:spring-core

Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2014-3578 gsd-2014-3578 2026-10-03T05:11:53.817829+00:00 gsd-2014-3578 https://cve.radiocsirt.org/vuln/jvndb-2014-000054 jvndb-2014-000054 2026-10-03T05:11:53.817842+00:00

Spring Framework is a Java framework for developing web applications. Spring Framework contains a directory traversal vulnerability. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/rhsa-2015:0234 RHSA-2015:0234 — Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.0.3 security update 2026-10-03T05:11:53.817862+00:00

CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix OpenJDK: XML parsing Denial of Service (JAXP, 8017298) JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs Tomcat/JBossWeb: Request smuggling via malicious content length header Tomcat/JBossWeb: XML parser hijack by malicious web application netty: DoS via memory exhaustion during data aggregation Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter Security: Invalid EJB caller role check implementation RESTEasy: XXE via parameter entities PicketLink: XXE via insecure DocumentBuilderFactory usage Validator: JSM bypass via ReflectionHelper CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix Framework: Directory traversal Framework: directory traversal flaw jbpm-designer: XXE in BPMN2 import UberFire: Information disclosure and RCE via insecure file upload/download servlets Workbench: Insufficient authorization constraints

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3578 UBUNTU-CVE-2014-3578 2026-10-03T05:11:53.817912+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java

Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL.