https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:07:51.358822+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-01880 bdu:2019-01880 2026-10-02T17:07:51.366592+00:00 bdu:2019-01880 https://cve.radiocsirt.org/vuln/certfr-2020-avi-420 certfr-2020-avi-420 — De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un atta… 2026-10-02T17:07:51.366626+00:00 certfr-2020-avi-420 https://cve.radiocsirt.org/vuln/euvd-2026-201733 EUVD-2026-201733 2026-10-02T17:07:51.366645+00:00 EUVD-2026-201733 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000613 fkie_cve-2018-1000613 2026-10-02T17:07:51.366656+00:00

Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application. This vulnerability appears to have been fixed in 1.60 and later.

 https://cve.radiocsirt.org/vuln/ghsa-4446-656p-f54g GHSA-4446-656p-f54g — Deserialization of Untrusted Data in Bouncy castle 2026-10-02T17:07:51.366686+00:00

Affected: Maven: org.bouncycastle:bcprov-jdk15on

Legion of the Bouncy Castle Java Cryptography APIs starting in version 1.57 and prior to version 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application.

This vulnerability appears to have been fixed in 1.60 and later.

 https://cve.radiocsirt.org/vuln/gsd-2018-1000613 gsd-2018-1000613 2026-10-02T17:07:51.366712+00:00 gsd-2018-1000613 https://cve.radiocsirt.org/vuln/jvndb-2018-008573 jvndb-2018-008573 2026-10-02T17:07:51.366723+00:00

Multiple vulnerabilities have been found in Hitachi Infrastructure Analytics Advisor.

 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0607-1 openSUSE-SU-2020:0607-1 — Security update for bouncycastle 2026-10-02T17:07:51.366739+00:00

Security update for bouncycastle

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000613 UBUNTU-CVE-2018-1000613 2026-10-02T17:07:51.366754+00:00

Affected: Ubuntu:Pro:18.04:LTS: bouncycastle

Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application. This vulnerability appears to have been fixed in 1.60 and later.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1682 WID-SEC-W-2024-1682 — Oracle Retail Applications: Mehrere Schwachstellen 2026-10-02T17:07:51.366775+00:00

Ein Angreifer kann mehrere Schwachstellen in Oracle Retail Applications ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.