https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:04:55.566758+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-10740 cnvd-2016-10740 2026-10-03T02:04:55.658476+00:00 cnvd-2016-10740 https://cve.radiocsirt.org/vuln/euvd-2026-87647 EUVD-2026-87647 2026-10-03T02:04:55.658513+00:00 EUVD-2026-87647 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9177 fkie_cve-2016-9177 2026-10-03T02:04:55.658528+00:00

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

 https://cve.radiocsirt.org/vuln/ghsa-89gc-6cw6-4vch GHSA-89gc-6cw6-4vch — Spark allows remote attackers to read arbitrary files via a .. (dot dot) in the URI 2026-10-03T02:04:55.658557+00:00

Affected: Maven: com.sparkjava:spark-core

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

 https://cve.radiocsirt.org/vuln/gsd-2016-9177 gsd-2016-9177 2026-10-03T02:04:55.658581+00:00 gsd-2016-9177 https://cve.radiocsirt.org/vuln/rhsa-2017:0868 RHSA-2017:0868 — Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R2 security and bug fix update 2026-10-03T02:04:55.658593+00:00

jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name elasticsearch: remote code execution via Groovy sandbox bypass ActiveMQ: DoS in client via shutdown command apache-cxf: XSS in Apache CXF FormattedServiceListWriter Groovy: Remote code execution via deserialization apache-cxf: Atom entity provider of Apache CXF JAX-RS is vulnerable to XXE Spark: Directory traversal vulnerability in version 2.5 swagger-ui: cross-site scripting in key names camel-snakeyaml: Unmarshalling operation is vulnerable to RCE