https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:17:24.720168+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-05056 cnvd-2015-05056 2026-10-02T23:17:24.810356+00:00 cnvd-2015-05056 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3208 fkie_cve-2015-3208 2026-10-02T23:17:24.810394+00:00

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

 https://cve.radiocsirt.org/vuln/ghsa-x6rc-54xp-ccxx Withdrawn: GHSA-x6rc-54xp-ccxx — Withdrawn Advisory: Improper Restriction of XML External Entity Reference in Apache ActiveMQ 2026-10-02T23:17:24.810425+00:00

Withdrawn by the publisher.

Affected: Maven: org.apache.activemq:activemq-client

## Withdrawn Advisory This advisory has been withdrawn because further investgation revealed that this is not a security issue. This link is maintained to preserve external references.

## Original Description XML external entity (XXE) vulnerability in the XPath selector component in Artemis ActiveMQ before commit 48d9951d879e0c8cbb59d4b64ab59d53ef88310d allows remote attackers to have unspecified impact via unknown vectors.

 https://cve.radiocsirt.org/vuln/gsd-2015-3208 gsd-2015-3208 2026-10-02T23:17:24.810453+00:00 gsd-2015-3208 https://cve.radiocsirt.org/vuln/rhsa-2018:2927 RHSA-2018:2927 — Red Hat Security Advisory: Satellite 6.4 security, bug fix, and enhancement update 2026-10-02T23:17:24.810465+00:00

bouncycastle: Information disclosure in GCMBlockCipher bouncycastle: DSA does not fully validate ASN.1 encoding during signature verification allowing for injection of unsigned data bouncycastle: Information leak in AESFastEngine class bouncycastle: Carry propagation bug in math.raw.Nat??? class bouncycastle: Information exposure in DSA signature generation via timing attack bouncycastle: ECDSA improper validation of ASN.1 encoding of signature bouncycastle: DSA key pair generator generates a weak private key by default bouncycastle: DHIES implementation allowed the use of ECB mode bouncycastle: DHIES/ECIES CBC modes are vulnerable to padding oracle attack bouncycastle: Other party DH public keys are not fully validated bouncycastle: ECIES implementation allowed the use of ECB mode logback: Serialization vulnerability in SocketServer and ServerSocketReceiver python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs hibernate-validator: Privilege escalation when running under the security manager puppet: Unpacking of tarballs in tar/mini.rb can create files with insecure permissions puppet: Environment leakage in puppet-agent 6: XSS in discovery rule filter autocomplete functionality jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) foreman: Stored XSS in fact name or value pulp: sensitive credentials revealed through the API foreman: SQL injection due to improper handling of the widget…