https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:31:04.672500+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2018-avi-111 certfr-2018-avi-111 — Une vulnérabilité a été découverte dans les produits Pivotal . Elle permet à un attaquant de provoquer une exécution de… 2026-10-02T21:31:04.749183+00:00 certfr-2018-avi-111 https://cve.radiocsirt.org/vuln/cnvd-2017-27968 cnvd-2017-27968 2026-10-02T21:31:04.749224+00:00 cnvd-2017-27968 https://cve.radiocsirt.org/vuln/euvd-2026-75122 EUVD-2026-75122 2026-10-02T21:31:04.749239+00:00 EUVD-2026-75122 https://cve.radiocsirt.org/vuln/fkie_cve-2017-8046 fkie_cve-2017-8046 2026-10-02T21:31:04.749250+00:00

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code.

 https://cve.radiocsirt.org/vuln/ghsa-9qf9-28h9-hqcj GHSA-9qf9-28h9-hqcj — Remote code execution in PATCH requests in Spring Data REST 2026-10-02T21:31:04.749280+00:00

Affected: Maven: org.springframework.data:spring-data-rest-core

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) can use specially crafted JSON data to run arbitrary Java code.

 https://cve.radiocsirt.org/vuln/gsd-2017-8046 gsd-2017-8046 2026-10-02T21:31:04.749305+00:00 gsd-2017-8046 https://cve.radiocsirt.org/vuln/rhsa-2018:2405 RHSA-2018:2405 — Red Hat Security Advisory: Red Hat FIS 2.0 on Fuse 6.3.0 R7 security and bug fix update 2026-10-02T21:31:04.749316+00:00

spring-boot: Malicious PATCH requests submitted to servers can use specially crafted JSON data to run arbitrary Java code undertow: Client can use bogus uri in Digest authentication spring-framework: Improper URL path validation allows for bypassing of security checks on static resources ignite: Possible Execution of Arbitrary Code Within Deserialization Endpoints spark: Absolute and relative pathnames allow for unintended static file disclosure

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0528 WID-SEC-W-2024-0528 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-02T21:31:04.749337+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Berechtigungen zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.