https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:56:12.696613+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-07570 cnvd-2018-07570 2026-10-02T13:56:12.702677+00:00 cnvd-2018-07570 https://cve.radiocsirt.org/vuln/euvd-2026-175781 EUVD-2026-175781 2026-10-02T13:56:12.702708+00:00 EUVD-2026-175781 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1271 fkie_cve-2018-1271 2026-10-02T13:56:12.702723+00:00

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack.

 https://cve.radiocsirt.org/vuln/ghsa-g8hw-794c-4j9g GHSA-g8hw-794c-4j9g — Path Traversal in org.springframework:spring-core 2026-10-02T13:56:12.702751+00:00

Affected: Maven: org.springframework:spring-core

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack.

 https://cve.radiocsirt.org/vuln/gsd-2018-1271 gsd-2018-1271 2026-10-02T13:56:12.702775+00:00 gsd-2018-1271 https://cve.radiocsirt.org/vuln/rhsa-2018:1320 RHSA-2018:1320 — Red Hat Security Advisory: Red Hat OpenShift Application Runtimes security and bug fix update 2026-10-02T13:56:12.702787+00:00

spring-framework: Directory traversal vulnerability with static resources on Windows filesystems spring-framework: Multipart content pollution spring-framework: Address partial fix for CVE-2018-1270 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources tomcat: Late application of security constraints can lead to resource exposure for unauthorised users

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0528 WID-SEC-W-2024-0528 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-02T13:56:12.702808+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Berechtigungen zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.