https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:24:25.508351+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-04797 bdu:2019-04797 2026-10-02T19:24:25.530046+00:00 bdu:2019-04797 https://cve.radiocsirt.org/vuln/certfr-2019-avi-086 certfr-2019-avi-086 — De multiples vulnérabilités ont été découvertes dans IBM InfoSphere. Elles permettent à un attaquant de provoquer une e… 2026-10-02T19:24:25.530086+00:00 certfr-2019-avi-086 https://cve.radiocsirt.org/vuln/cnvd-2018-04396 cnvd-2018-04396 2026-10-02T19:24:25.530105+00:00 cnvd-2018-04396 https://cve.radiocsirt.org/vuln/euvd-2026-62444 EUVD-2026-62444 2026-10-02T19:24:25.530119+00:00 EUVD-2026-62444 https://cve.radiocsirt.org/vuln/fkie_cve-2018-5968 fkie_cve-2018-5968 2026-10-02T19:24:25.530130+00:00

FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.

 https://cve.radiocsirt.org/vuln/ghsa-w3f4-3q6j-rh82 GHSA-w3f4-3q6j-rh82 — Deserialization of Untrusted Data in jackson-databind 2026-10-02T19:24:25.530160+00:00

Affected: Maven: com.fasterxml.jackson.core:jackson-databind

FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.

 https://cve.radiocsirt.org/vuln/gsd-2018-5968 gsd-2018-5968 2026-10-02T19:24:25.530186+00:00 gsd-2018-5968 https://cve.radiocsirt.org/vuln/rhsa-2018:0478 RHSA-2018:0478 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.1 security update 2026-10-02T19:24:25.530198+00:00

resteasy: Vary header not added by CORS filter leading to cache poisoning artemis/hornetq: memory exhaustion via UDP and JGroups discovery undertow: Client can use bogus uri in Digest authentication infinispan: Unsafe deserialization of malicious object injected into data cache jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) undertow: ALLOW_ENCODED_SLASH option not taken into account in the AjpRequestParser jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-5968 UBUNTU-CVE-2018-5968 2026-10-02T19:24:25.530228+00:00

Affected: Ubuntu:Pro:14.04:LTS: jackson-databind, Ubuntu:Pro:16.04:LTS: jackson-databind

FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1459 WID-SEC-W-2025-1459 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-02T19:24:25.530249+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, und um weitere nicht näher spezifizierte Angriffe durchzuführen.