https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:21:53.141229+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-04097 cnvd-2017-04097 2026-10-02T22:21:53.233020+00:00 cnvd-2017-04097 https://cve.radiocsirt.org/vuln/euvd-2026-73505 EUVD-2026-73505 2026-10-02T22:21:53.233056+00:00 EUVD-2026-73505 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5644 fkie_cve-2017-5644 2026-10-02T22:21:53.233069+00:00

Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack.

 https://cve.radiocsirt.org/vuln/ghsa-78vv-qj73-h9m5 GHSA-78vv-qj73-h9m5 — Improper Restriction of Recursive Entity References in DTDs in Apache POI 2026-10-02T22:21:53.233096+00:00

Affected: Maven: org.apache.poi:poi

Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack.

 https://cve.radiocsirt.org/vuln/gsd-2017-5644 gsd-2017-5644 2026-10-02T22:21:53.233118+00:00 gsd-2017-5644 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-5644 UBUNTU-CVE-2017-5644 2026-10-02T22:21:53.233129+00:00

Affected: Ubuntu:16.04:LTS: libapache-poi-java

Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0068 WID-SEC-W-2024-0068 — IBM Business Automation Workflow: Mehrere Schwachstellen 2026-10-02T22:21:53.233146+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder Dateien zu manipulieren.