https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:46:39.298817+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2017-02651 bdu:2017-02651 2026-10-02T20:46:39.537110+00:00 bdu:2017-02651 https://cve.radiocsirt.org/vuln/certfr-2016-avi-348 certfr-2016-avi-348 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle Database Server</span>. Certaines d'entr… 2026-10-02T20:46:39.537148+00:00 certfr-2016-avi-348 https://cve.radiocsirt.org/vuln/cnvd-2015-07906 cnvd-2015-07906 2026-10-02T20:46:39.537171+00:00 cnvd-2015-07906 https://cve.radiocsirt.org/vuln/euvd-2026-95037 EUVD-2026-95037 2026-10-02T20:46:39.537184+00:00 EUVD-2026-95037 https://cve.radiocsirt.org/vuln/fkie_cve-2015-7501 fkie_cve-2015-7501 2026-10-02T20:46:39.537195+00:00

Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

 https://cve.radiocsirt.org/vuln/ghsa-fjq5-5j5f-mvxh GHSA-fjq5-5j5f-mvxh — Deserialization of Untrusted Data in Apache commons collections 2026-10-02T20:46:39.537223+00:00

Affected: Maven: commons-collections:commons-collections, Maven: org.apache.commons:commons-collections4, Maven: org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-collections, Maven: net.sourceforge.collections:collections-generic, Maven: org.apache.servicemix.bundles:org.apache.servicemix.bundles.collections-generic

It was found that the Apache commons-collections library permitted code execution when deserializing objects involving a specially constructed chain of classes. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using the commons-collections library.

 https://cve.radiocsirt.org/vuln/gsd-2015-7501 gsd-2015-7501 2026-10-02T20:46:39.537256+00:00 gsd-2015-7501 https://cve.radiocsirt.org/vuln/rhsa-2015:2500 RHSA-2015:2500 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4 security update 2026-10-02T20:46:39.537267+00:00

apache-commons-collections: InvokerTransformer code execution during deserialisation

 https://cve.radiocsirt.org/vuln/rhsa-2015:2522 RHSA-2015:2522 — Red Hat Security Advisory: apache-commons-collections security update 2026-10-02T20:46:39.537285+00:00

apache-commons-collections: InvokerTransformer code execution during deserialisation

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-7501 UBUNTU-CVE-2015-7501 2026-10-02T20:46:39.537300+00:00

Affected: Ubuntu:Pro:14.04:LTS: libcommons-collections3-java, Ubuntu:16.04:LTS: libcommons-collections3-java, Ubuntu:16.04:LTS: libcommons-collections4-java, Ubuntu:18.04:LTS: libcommons-collections4-java, Ubuntu:20.04:LTS: libcommons-collections4-java, Ubuntu:22.04:LTS: libcommons-collections4-java, Ubuntu:24.04:LTS: libcommons-collections4-java, Ubuntu:25.10: libcommons-collections4-java, Ubuntu:26.04:LTS: libcommons-collections4-java

Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1738 WID-SEC-W-2022-1738 — IBM InfoSphere Information Server: Mehrere Schwachstellen 2026-10-02T20:46:39.537334+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.