https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:07:04.842021+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-02898 bdu:2019-02898 2026-10-02T17:07:04.872665+00:00 bdu:2019-02898 https://cve.radiocsirt.org/vuln/certfr-2022-avi-650 certfr-2022-avi-650 — De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un atta… 2026-10-02T17:07:04.872708+00:00 certfr-2022-avi-650 https://cve.radiocsirt.org/vuln/cnvd-2019-37152 cnvd-2019-37152 2026-10-02T17:07:04.872727+00:00 cnvd-2019-37152 https://cve.radiocsirt.org/vuln/euvd-2026-69692 EUVD-2026-69692 2026-10-02T17:07:04.872739+00:00 EUVD-2026-69692 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19362 fkie_cve-2018-19362 2026-10-02T17:07:04.872750+00:00

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.

 https://cve.radiocsirt.org/vuln/ghsa-c8hm-7hpq-7jhg GHSA-c8hm-7hpq-7jhg — com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data 2026-10-02T17:07:04.872777+00:00

Affected: Maven: com.fasterxml.jackson.core:jackson-databind

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.

 https://cve.radiocsirt.org/vuln/gsd-2018-19362 gsd-2018-19362 2026-10-02T17:07:04.872802+00:00 gsd-2018-19362 https://cve.radiocsirt.org/vuln/rhsa-2019:0782 RHSA-2019:0782 — Red Hat Security Advisory: rh-maven35-jackson-databind security update 2026-10-02T17:07:04.872813+00:00

jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis jackson-databind: improper polymorphic deserialization of types from Jodd-db library jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver jackson-databind: arbitrary code execution in slf4j-ext class jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes jackson-databind: exfiltration/XXE in some JDK classes jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class jackson-databind: improper polymorphic deserialization in axis2-transport-jms class jackson-databind: improper polymorphic deserialization in openjpa class jackson-databind: improper polymorphic deserialization in jboss-common-core class

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-19362 UBUNTU-CVE-2018-19362 2026-10-02T17:07:04.872847+00:00

Affected: Ubuntu:Pro:14.04:LTS: jackson-databind, Ubuntu:Pro:16.04:LTS: jackson-databind, Ubuntu:18.04:LTS: jackson-databind

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1682 WID-SEC-W-2024-1682 — Oracle Retail Applications: Mehrere Schwachstellen 2026-10-02T17:07:04.872868+00:00

Ein Angreifer kann mehrere Schwachstellen in Oracle Retail Applications ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.