https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:56:01.706596+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01382 bdu:2021-01382 2026-10-03T09:56:01.762676+00:00 bdu:2021-01382 https://cve.radiocsirt.org/vuln/certfr-2019-avi-086 certfr-2019-avi-086 — De multiples vulnérabilités ont été découvertes dans IBM InfoSphere. Elles permettent à un attaquant de provoquer une e… 2026-10-03T09:56:01.762726+00:00 certfr-2019-avi-086 https://cve.radiocsirt.org/vuln/cnvd-2018-04057 cnvd-2018-04057 2026-10-03T09:56:01.762745+00:00 cnvd-2018-04057 https://cve.radiocsirt.org/vuln/euvd-2026-251081 EUVD-2026-251081 2026-10-03T09:56:01.762757+00:00 EUVD-2026-251081 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17485 fkie_cve-2017-17485 2026-10-03T09:56:01.762768+00:00

FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath.

 https://cve.radiocsirt.org/vuln/ghsa-rfx6-vp9g-rh7v GHSA-rfx6-vp9g-rh7v — jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass 2026-10-03T09:56:01.762797+00:00

Affected: Maven: com.fasterxml.jackson.core:jackson-databind

FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath.

 https://cve.radiocsirt.org/vuln/gsd-2017-17485 gsd-2017-17485 2026-10-03T09:56:01.762823+00:00 gsd-2017-17485 https://cve.radiocsirt.org/vuln/rhsa-2018:0116 RHSA-2018:0116 — Red Hat Security Advisory: rh-eclipse46-jackson-databind security update 2026-10-03T09:56:01.762835+00:00

jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-17485 UBUNTU-CVE-2017-17485 2026-10-03T09:56:01.762852+00:00

Affected: Ubuntu:Pro:14.04:LTS: jackson-databind, Ubuntu:Pro:16.04:LTS: jackson-databind

FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen 2026-10-03T09:56:01.762873+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.