https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:03:54.800377+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-00822 bdu:2019-00822 2026-10-03T09:03:55.018888+00:00 bdu:2019-00822 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T09:03:55.018933+00:00 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/cnvd-2018-25306 cnvd-2018-25306 2026-10-03T09:03:55.018988+00:00 cnvd-2018-25306 https://cve.radiocsirt.org/vuln/euvd-2026-71245 EUVD-2026-71245 2026-10-03T09:03:55.019017+00:00 EUVD-2026-71245 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1002105 fkie_cve-2018-1002105 2026-10-03T09:03:55.019028+00:00

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.

 https://cve.radiocsirt.org/vuln/ghsa-579h-mv94-g4gp GHSA-579h-mv94-g4gp — Privilege Escalation in Kubernetes 2026-10-03T09:03:55.019059+00:00

Affected: Go: github.com/kubernetes/kubernetes

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.

 https://cve.radiocsirt.org/vuln/gsd-2018-1002105 gsd-2018-1002105 2026-10-03T09:03:55.019087+00:00 gsd-2018-1002105 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0554-1 openSUSE-SU-2020:0554-1 — Security update for kubernetes 2026-10-03T09:03:55.019098+00:00

Security update for kubernetes

 https://cve.radiocsirt.org/vuln/rhsa-2018:2906 RHSA-2018:2906 — Red Hat Security Advisory: OpenShift Container Platform 3.7 security update 2026-10-03T09:03:55.019119+00:00

atomic-openshift: oc patch with json causes masterapi service crash kubernetes: authentication/authorization bypass in the handling of non-101 responses

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1002105 Withdrawn: UBUNTU-CVE-2018-1002105 2026-10-03T09:03:55.019138+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:20.04:LTS: kubernetes, Ubuntu:22.04:LTS: kubernetes, Ubuntu:24.04:LTS: kubernetes

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510 WID-SEC-W-2022-0510 — IBM DB2: Mehrere Schwachstellen 2026-10-03T09:03:55.019162+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.