https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:06:10.649464+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-00563 bdu:2019-00563 2026-10-02T17:06:10.655570+00:00 bdu:2019-00563 https://cve.radiocsirt.org/vuln/cnvd-2019-05302 cnvd-2019-05302 2026-10-02T17:06:10.655602+00:00 cnvd-2019-05302 https://cve.radiocsirt.org/vuln/euvd-2026-173568 EUVD-2026-173568 2026-10-02T17:06:10.655617+00:00 EUVD-2026-173568 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11039 fkie_cve-2018-11039 2026-10-02T17:06:10.655628+00:00

Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS vulnerability, a malicious user (or attacker) can use this filter to escalate to an XST (Cross Site Tracing) attack.

 https://cve.radiocsirt.org/vuln/ghsa-9gcm-f4x3-8jpw GHSA-9gcm-f4x3-8jpw — Spring Framework Cross Site Tracing (XST) 2026-10-02T17:06:10.655654+00:00

Affected: Maven: org.springframework:spring-web

Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS vulnerability, a malicious user (or attacker) can use this filter to escalate to an XST (Cross Site Tracing) attack.

 https://cve.radiocsirt.org/vuln/gsd-2018-11039 gsd-2018-11039 2026-10-02T17:06:10.655677+00:00 gsd-2018-11039 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11039 UBUNTU-CVE-2018-11039 2026-10-02T17:06:10.655688+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java

Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS vulnerability, a malicious user (or attacker) can use this filter to escalate to an XST (Cross Site Tracing) attack.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0528 WID-SEC-W-2024-0528 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-02T17:06:10.655708+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Berechtigungen zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.