https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:42:15.552863+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2018-avi-347 certfr-2018-avi-347 — De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoqu… 2026-10-02T23:42:15.819894+00:00 certfr-2018-avi-347 https://cve.radiocsirt.org/vuln/cnvd-2017-32627 cnvd-2017-32627 2026-10-02T23:42:15.819955+00:00 cnvd-2017-32627 https://cve.radiocsirt.org/vuln/euvd-2026-175149 EUVD-2026-175149 2026-10-02T23:42:15.819971+00:00 EUVD-2026-175149 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15095 fkie_cve-2017-15095 2026-10-02T23:42:15.819983+00:00

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.

 https://cve.radiocsirt.org/vuln/ghsa-h592-38cm-4ggp GHSA-h592-38cm-4ggp — jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution 2026-10-02T23:42:15.820012+00:00

Affected: Maven: com.fasterxml.jackson.core:jackson-databind

jackson-databind in versions prior to 2.8.11 and 2.9.4 contain a deserialization flaw which allows an unauthenticated user to perform code execution by sending maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525, blacklisting additonal vulnerable classes.

 https://cve.radiocsirt.org/vuln/gsd-2017-15095 gsd-2017-15095 2026-10-02T23:42:15.820039+00:00 gsd-2017-15095 https://cve.radiocsirt.org/vuln/rhsa-2017:3189 RHSA-2017:3189 — Red Hat Security Advisory: rh-eclipse47-jackson-databind security update 2026-10-02T23:42:15.820051+00:00

jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15095 UBUNTU-CVE-2017-15095 2026-10-02T23:42:15.820068+00:00

Affected: Ubuntu:Pro:14.04:LTS: jackson-databind, Ubuntu:Pro:14.04:LTS: libjackson-json-java, Ubuntu:16.04:LTS: libjackson-json-java, Ubuntu:Pro:16.04:LTS: jackson-databind, Ubuntu:18.04:LTS: libjackson-json-java, Ubuntu:20.04:LTS: libjackson-json-java

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen 2026-10-02T23:42:15.820095+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.