https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:50:05.528655+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-02952 bdu:2021-02952 2026-10-02T14:50:05.837210+00:00 bdu:2021-02952 https://cve.radiocsirt.org/vuln/certfr-2019-avi-132 certfr-2019-avi-132 — De multiples vulnérabilités ont été découvertes dans Tenable Nessus. Elles permettent à un attaquant de provoquer un dé… 2026-10-02T14:50:05.837259+00:00 certfr-2019-avi-132 https://cve.radiocsirt.org/vuln/cnvd-2018-04727 cnvd-2018-04727 2026-10-02T14:50:05.837281+00:00 cnvd-2018-04727 https://cve.radiocsirt.org/vuln/euvd-2026-80021 EUVD-2026-80021 2026-10-02T14:50:05.837295+00:00 EUVD-2026-80021 https://cve.radiocsirt.org/vuln/fkie_cve-2017-18214 fkie_cve-2017-18214 2026-10-02T14:50:05.837306+00:00

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

 https://cve.radiocsirt.org/vuln/ghsa-446m-mv8f-q348 GHSA-446m-mv8f-q348 — Regular Expression Denial of Service in moment 2026-10-02T14:50:05.837342+00:00

Affected: npm: moment

Affected versions of `moment` are vulnerable to a low severity regular expression denial of service when parsing dates as strings.

## Recommendation

Update to version 2.19.3 or later.

 https://cve.radiocsirt.org/vuln/gsd-2017-18214 gsd-2017-18214 2026-10-02T14:50:05.837368+00:00 gsd-2017-18214 https://cve.radiocsirt.org/vuln/msrc_cve-2017-18214 msrc_CVE-2017-18214 — The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date strin… 2026-10-02T14:50:05.837379+00:00 msrc_CVE-2017-18214 https://cve.radiocsirt.org/vuln/rhsa-2023:0552 RHSA-2023:0552 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update 2026-10-02T14:50:05.837396+00:00

jquery: Cross-site scripting via cross-domain ajax requests bootstrap: XSS in the data-target attribute nodejs-moment: Regular expression denial of service bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip bootstrap: XSS in the tooltip or popover data-template attribute jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods wildfly-elytron: possible timing attacks via use of unsafe comparator jettison: parser crash by stackoverflow jettison: memory exhaustion via user-supplied XML or JSON data woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays mina-sshd: Java unsafe deserialization vulnerability jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos CXF: SSRF Vulnerability

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-18214 UBUNTU-CVE-2017-18214 2026-10-02T14:50:05.837448+00:00

Affected: Ubuntu:Pro:16.04:LTS: node-moment

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen 2026-10-02T14:50:05.837470+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.