https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:41:45.591844+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-03489 bdu:2021-03489 2026-10-06T14:41:45.608371+00:00 bdu:2021-03489 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0903 certfr-2024-avi-0903 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-06T14:41:45.608408+00:00 certfr-2024-avi-0903 https://cve.radiocsirt.org/vuln/euvd-2026-259073 EUVD-2026-259073 2026-10-06T14:41:45.608428+00:00 EUVD-2026-259073 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1311 fkie_cve-2018-1311 2026-10-06T14:41:45.608441+00:00

The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.

 https://cve.radiocsirt.org/vuln/ghsa-7rpp-hwhj-9hv8 GHSA-7rpp-hwhj-9hv8 2026-10-06T14:41:45.608470+00:00

The Apache Xerces-C 3.0.0 to 3.2.2 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.

 https://cve.radiocsirt.org/vuln/gsd-2018-1311 gsd-2018-1311 2026-10-06T14:41:45.608487+00:00 gsd-2018-1311 https://cve.radiocsirt.org/vuln/msrc_cve-2018-1311 msrc_CVE-2018-1311 — The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external… 2026-10-06T14:41:45.608498+00:00 msrc_CVE-2018-1311 https://cve.radiocsirt.org/vuln/oesa-2024-1160 OESA-2024-1160 — xerces-c security update 2026-10-06T14:41:45.608520+00:00

Affected: openEuler:20.03-LTS-SP4: xerces-c

Xerces-C is a validating XML parser written in a portable subset of C++. Xerces-C makes it easy to give your application the ability to read and write XML data. A shared library is provided for parsing, generating, manipulating, and validating XML documents. Xerces-C is faithful to the XML 1.0 recommendation and associated standards ( DOM 1.0, DOM 2.0. SAX 1.0, SAX 2.0, Namespaces). Security Fix(es): The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.(CVE-2018-1311)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1231-1 openSUSE-SU-2021:1231-1 — Security update for xerces-c 2026-10-06T14:41:45.608545+00:00

Security update for xerces-c

 https://cve.radiocsirt.org/vuln/rhsa-2020:0702 RHSA-2020:0702 — Red Hat Security Advisory: xerces-c security update 2026-10-06T14:41:45.608560+00:00

xerces-c: XML parser contains a use-after-free error triggered during the scanning of external DTDs

 https://cve.radiocsirt.org/vuln/suse-su-2021:2920-1 SUSE-SU-2021:2920-1 — Security update for xerces-c 2026-10-06T14:41:45.608574+00:00

Security update for xerces-c

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1311 UBUNTU-CVE-2018-1311 2026-10-06T14:41:45.608587+00:00

Affected: Ubuntu:Pro:14.04:LTS: xerces-c, Ubuntu:Pro:16.04:LTS: xerces-c, Ubuntu:Pro:18.04:LTS: xerces-c, Ubuntu:20.04:LTS: xerces-c, Ubuntu:22.04:LTS: xerces-c, Ubuntu:Pro:22.04:LTS: xerces-c

The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1034 WID-SEC-W-2023-1034 — Oracle JD Edwards: Mehrere Schwachstellen 2026-10-06T14:41:45.608612+00:00

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Oracle JD Edwards ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.