https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:57:59.358168+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0556 certfr-2026-avi-0556 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T14:57:59.364140+00:00 certfr-2026-avi-0556 https://cve.radiocsirt.org/vuln/cnvd-2018-09566 cnvd-2018-09566 2026-10-03T14:57:59.364178+00:00 cnvd-2018-09566 https://cve.radiocsirt.org/vuln/euvd-2026-176609 EUVD-2026-176609 2026-10-03T14:57:59.364193+00:00 EUVD-2026-176609 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15691 fkie_cve-2017-15691 2026-10-03T14:57:59.364206+00:00

In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.

 https://cve.radiocsirt.org/vuln/ghsa-wp2f-hrg2-3r5m GHSA-wp2f-hrg2-3r5m — Improper Restriction of XML External Entity Reference in Apache uimaj 2026-10-03T14:57:59.364233+00:00

Affected: Maven: org.apache.uima:uimafit-core, Maven: org.apache.uima:uimaj-core, Maven: org.apache.uima:uimaj-as-core

In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.

 https://cve.radiocsirt.org/vuln/gsd-2017-15691 gsd-2017-15691 2026-10-03T14:57:59.364261+00:00 gsd-2017-15691 https://cve.radiocsirt.org/vuln/rhsa-2019:1545 RHSA-2019:1545 — Red Hat Security Advisory: Red Hat Fuse 7.3.1 security update 2026-10-03T14:57:59.364273+00:00

bsh2: remote code execution via deserialization log4j: Socket receiver deserialization vulnerability uima: XML external entity expansion (XXE) can allow attackers to execute arbitrary code mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018) thrift: Improper Access Control grants access to files outside the webservers docroot path log4j: deserialization of untrusted data in SocketServer

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15691 UBUNTU-CVE-2017-15691 2026-10-03T14:57:59.364295+00:00

Affected: Ubuntu:16.04:LTS: uimaj, Ubuntu:18.04:LTS: uimaj

In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3531 WID-SEC-W-2024-3531 — IBM FileNet Content Manager (Apache uimaj): Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T14:57:59.364315+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM FileNet Content Manager ausnutzen, um Informationen offenzulegen.