https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:59:52.791929+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-01776 bdu:2019-01776 2026-10-02T18:59:52.797774+00:00 bdu:2019-01776 https://cve.radiocsirt.org/vuln/cnvd-2019-05300 cnvd-2019-05300 2026-10-02T18:59:52.797807+00:00 cnvd-2019-05300 https://cve.radiocsirt.org/vuln/euvd-2026-181219 EUVD-2026-181219 2026-10-02T18:59:52.797822+00:00 EUVD-2026-181219 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11040 fkie_cve-2018-11040 2026-10-02T18:59:52.797832+00:00

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured in an application, JSONP support is automatically ready to use through the "jsonp" and "callback" JSONP parameters, enabling cross-domain requests.

 https://cve.radiocsirt.org/vuln/ghsa-f26x-pr96-vw86 GHSA-f26x-pr96-vw86 — Moderate severity vulnerability that affects org.springframework:spring-core 2026-10-02T18:59:52.797862+00:00

Affected: Maven: org.springframework:spring-core

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured in an application, JSONP support is automatically ready to use through the "jsonp" and "callback" JSONP parameters, enabling cross-domain requests.

 https://cve.radiocsirt.org/vuln/gsd-2018-11040 gsd-2018-11040 2026-10-02T18:59:52.797889+00:00 gsd-2018-11040 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11040 UBUNTU-CVE-2018-11040 2026-10-02T18:59:52.797901+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured in an application, JSONP support is automatically ready to use through the "jsonp" and "callback" JSONP parameters, enabling cross-domain requests.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0528 WID-SEC-W-2024-0528 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-02T18:59:52.797922+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Berechtigungen zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.