https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:52:09.498568+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-04401 bdu:2019-04401 2026-10-03T01:52:09.648886+00:00 bdu:2019-04401 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0760 certfr-2025-avi-0760 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T01:52:09.648931+00:00 certfr-2025-avi-0760 https://cve.radiocsirt.org/vuln/cnvd-2019-41722 cnvd-2019-41722 2026-10-03T01:52:09.648954+00:00 cnvd-2019-41722 https://cve.radiocsirt.org/vuln/euvd-2026-71267 EUVD-2026-71267 2026-10-03T01:52:09.648968+00:00 EUVD-2026-71267 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000873 fkie_cve-2018-1000873 2026-10-03T01:52:09.648980+00:00

Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the nanoseconds field of a time value. This vulnerability appears to have been fixed in 2.9.8.

 https://cve.radiocsirt.org/vuln/ghsa-h4x4-5qp2-wp46 GHSA-h4x4-5qp2-wp46 — Moderate severity vulnerability that affects com.fasterxml.jackson.datatype:jackson-datatype-jsr353 2026-10-03T01:52:09.649013+00:00

Affected: Maven: com.fasterxml.jackson.datatype:jackson-datatype-jsr310

Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Databind that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the nanoseconds field of a time value. This vulnerability appears to have been fixed in 2.9.8.

 https://cve.radiocsirt.org/vuln/gsd-2018-1000873 gsd-2018-1000873 2026-10-03T01:52:09.649040+00:00 gsd-2018-1000873 https://cve.radiocsirt.org/vuln/rhsa-2020:5568 RHSA-2020:5568 — Red Hat Security Advisory: Red Hat Fuse 7.8.0 release and security update 2026-10-03T01:52:09.649052+00:00

jackson-modules-java8: DoS due to an Improper Input Validation thrift: Endless loop when feed with specific input data thrift: Out-of-bounds read related to TJSONProtocol or TSimpleJSONProtocol mysql-connector-java: privilege escalation in MySQL connector spring-ws: XML External Entity Injection (XXE) when receiving XML data from untrusted sources spring-batch: XML External Entity Injection (XXE) when receiving XML data from untrusted sources codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities hibernate-validator: safeHTML validator allows XSS AngularJS: Prototype pollution in merge function could result in code injection org.eclipse.paho.client.mqttv3: Improper hostname validation in the MQTT library cxf: does not restrict the number of message attachments cxf: OpenId Connect token service does not properly validate the clientId libquartz: XXE attacks via job description hibernate: SQL injection issue in Hibernate ORM batik: SSRF via "xlink:href" jetty: double release of resource can lead to information disclosure Undertow: Memory Leak in Undertow HttpOpenListener due to holding remoting connections indefinitely keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain tika: excessive memory usage in PSDParser apache-flink: JMX information disclosure vulnerability springframework: RFD attack via Content-Dispos…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000873 UBUNTU-CVE-2018-1000873 2026-10-03T01:52:09.649185+00:00

Affected: Ubuntu:Pro:14.04:LTS: jackson-databind, Ubuntu:Pro:16.04:LTS: jackson-databind, Ubuntu:18.04:LTS: jackson-databind, Ubuntu:20.04:LTS: jackson-databind, Ubuntu:22.04:LTS: jackson-databind, Ubuntu:24.04:LTS: jackson-databind, Ubuntu:25.10: jackson-databind, Ubuntu:26.04:LTS: jackson-databind

Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the nanoseconds field of a time value. This vulnerability appears to have been fixed in 2.9.8.