https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:52:22.433569+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-06642 cnvd-2017-06642 2026-10-03T03:52:22.499685+00:00 cnvd-2017-06642 https://cve.radiocsirt.org/vuln/euvd-2026-178815 EUVD-2026-178815 2026-10-03T03:52:22.499719+00:00 EUVD-2026-178815 https://cve.radiocsirt.org/vuln/fkie_cve-2016-6812 fkie_cve-2016-6812 2026-10-03T03:52:22.499734+00:00

The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to provide an HTML page which lists the names and absolute URL addresses of the available service endpoints. The module calculates the base URL using the current HttpServletRequest. The calculated base URL is used by FormattedServiceListWriter to build the service endpoint absolute URLs. If the unexpected matrix parameters have been injected into the request URL then these matrix parameters will find their way back to the client in the services list page which represents an XSS risk to the client.

 https://cve.radiocsirt.org/vuln/ghsa-vw2c-5wph-v92r GHSA-vw2c-5wph-v92r — Improper Neutralization of Input During Web Page Generation in Apache CXF 2026-10-03T03:52:22.499775+00:00

Affected: Maven: org.apache.cxf:cxf-core

The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to provide an HTML page which lists the names and absolute URL addresses of the available service endpoints. The module calculates the base URL using the current HttpServletRequest. The calculated base URL is used by FormattedServiceListWriter to build the service endpoint absolute URLs. If the unexpected matrix parameters have been injected into the request URL then these matrix parameters will find their way back to the client in the services list page which represents an XSS risk to the client.

 https://cve.radiocsirt.org/vuln/gsd-2016-6812 gsd-2016-6812 2026-10-03T03:52:22.499803+00:00 gsd-2016-6812 https://cve.radiocsirt.org/vuln/rhsa-2017:0868 RHSA-2017:0868 — Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R2 security and bug fix update 2026-10-03T03:52:22.499815+00:00

jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name elasticsearch: remote code execution via Groovy sandbox bypass ActiveMQ: DoS in client via shutdown command apache-cxf: XSS in Apache CXF FormattedServiceListWriter Groovy: Remote code execution via deserialization apache-cxf: Atom entity provider of Apache CXF JAX-RS is vulnerable to XXE Spark: Directory traversal vulnerability in version 2.5 swagger-ui: cross-site scripting in key names camel-snakeyaml: Unmarshalling operation is vulnerable to RCE

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 WID-SEC-W-2026-0180 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-03T03:52:22.499841+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.