https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:48:24.291507+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0556 certfr-2026-avi-0556 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-02T20:48:24.297967+00:00 certfr-2026-avi-0556 https://cve.radiocsirt.org/vuln/cnvd-2018-10141 cnvd-2018-10141 2026-10-02T20:48:24.298006+00:00 cnvd-2018-10141 https://cve.radiocsirt.org/vuln/euvd-2026-165506 EUVD-2026-165506 2026-10-02T20:48:24.298021+00:00 EUVD-2026-165506 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1339 fkie_cve-2018-1339 2026-10-02T20:48:24.298033+00:00

A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18.

 https://cve.radiocsirt.org/vuln/ghsa-p699-3wgc-7h72 GHSA-p699-3wgc-7h72 — org.apache.tika:tika-parsers has an Infinite Loop vulnerability 2026-10-02T20:48:24.298059+00:00

Affected: Maven: org.apache.tika:tika-parsers

Versions of the package `org.apache.tika:tika-parsers` before version 1.18 are vulnerable to Denial of Service (DoS) via a carefully crafted (or fuzzed) file that can trigger an infinite loop via the ChmParser.

 https://cve.radiocsirt.org/vuln/gsd-2018-1339 gsd-2018-1339 2026-10-02T20:48:24.298081+00:00 gsd-2018-1339 https://cve.radiocsirt.org/vuln/rhsa-2018:2669 RHSA-2018:2669 — Red Hat Security Advisory: Fuse 7.1 security update 2026-10-02T20:48:24.298092+00:00

1: Class Loader manipulation via request parameters thrift: Improper file path sanitization in t_go_generator.cc:format_go_output() of the go client library can allow an attacker to inject commands bouncycastle: DSA does not fully validate ASN.1 encoding during signature verification allowing for injection of unsigned data bouncycastle: Information leak in AESFastEngine class bouncycastle: Carry propagation bug in math.raw.Nat??? class bouncycastle: Information exposure in DSA signature generation via timing attack bouncycastle: ECDSA improper validation of ASN.1 encoding of signature bouncycastle: DSA key pair generator generates a weak private key by default bouncycastle: DHIES implementation allowed the use of ECB mode bouncycastle: DHIES/ECIES CBC modes are vulnerable to padding oracle attack bouncycastle: Other party DH public keys are not fully validated bouncycastle: ECIES implementation allowed the use of ECB mode async-http-client: Invalid URL parsing with '?' undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service spring-framework: Directory traversal vulnerability with static resources on Windows filesystems spring-framework: Multipart content pollution tika: Infinite loop in BPGParser can allow remote attacker to cause a denial of service tika: Infinite loop in ChmParser can allow remote attacker to cause a denial of service pdfbox: Infinite loop in AFMParser.java allows for out of memory erros via…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1339 UBUNTU-CVE-2018-1339 2026-10-02T20:48:24.298139+00:00

Affected: Ubuntu:16.04:LTS: tika, Ubuntu:18.04:LTS: tika, Ubuntu:25.10: tika, Ubuntu:26.04:LTS: tika

A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18.