https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:49:30.206955+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-11250 bdu:2025-11250 2026-10-03T13:49:30.444305+00:00 bdu:2025-11250 https://cve.radiocsirt.org/vuln/certfr-2020-avi-350 certfr-2020-avi-350 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T13:49:30.444354+00:00 certfr-2020-avi-350 https://cve.radiocsirt.org/vuln/euvd-2026-71224 EUVD-2026-71224 2026-10-03T13:49:30.444374+00:00 EUVD-2026-71224 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000632 fkie_cve-2018-1000632 2026-10-03T13:49:30.444387+00:00

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.

 https://cve.radiocsirt.org/vuln/ghsa-6pcc-3rfx-4gpm GHSA-6pcc-3rfx-4gpm — Dom4j contains a XML Injection vulnerability 2026-10-03T13:49:30.444417+00:00

Affected: Maven: org.dom4j:dom4j, Maven: dom4j:dom4j

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.

Note: This advisory applies to `dom4j:dom4j` version 1.x legacy artifacts. To resolve this a change to the latest version of `org.dom4j:dom4j` is recommended.

 https://cve.radiocsirt.org/vuln/gsd-2018-1000632 gsd-2018-1000632 2026-10-03T13:49:30.444447+00:00 gsd-2018-1000632 https://cve.radiocsirt.org/vuln/opensuse-su-2018:4045-1 openSUSE-SU-2018:4045-1 — Security update for dom4j 2026-10-03T13:49:30.444459+00:00

Security update for dom4j

 https://cve.radiocsirt.org/vuln/rhea-2019:1119 RHEA-2019:1119 — Red Hat Enhancement Advisory: rhvm-appliance security, bug fix, and enhancement update 2026-10-03T13:49:30.444476+00:00

undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents

 https://cve.radiocsirt.org/vuln/suse-su-2018:2861-1 SUSE-SU-2018:2861-1 — Security update for dom4j 2026-10-03T13:49:30.444493+00:00

Security update for dom4j

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000632 UBUNTU-CVE-2018-1000632 2026-10-03T13:49:30.444507+00:00

Affected: Ubuntu:14.04:LTS: dom4j, Ubuntu:16.04:LTS: dom4j, Ubuntu:18.04:LTS: dom4j

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0068 WID-SEC-W-2024-0068 — IBM Business Automation Workflow: Mehrere Schwachstellen 2026-10-03T13:49:30.444528+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder Dateien zu manipulieren.