https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:48:25.528556+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-04864 bdu:2019-04864 2026-10-02T20:48:25.607092+00:00 bdu:2019-04864 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T20:48:25.607132+00:00 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cnvd-2018-24150 cnvd-2018-24150 2026-10-02T20:48:25.607161+00:00 cnvd-2018-24150 https://cve.radiocsirt.org/vuln/euvd-2026-63526 EUVD-2026-63526 2026-10-02T20:48:25.607182+00:00 EUVD-2026-63526 https://cve.radiocsirt.org/vuln/fkie_cve-2018-8009 fkie_cve-2018-8009 2026-10-02T20:48:25.607201+00:00

Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is exploitable via the zip slip vulnerability in places that accept a zip file.

 https://cve.radiocsirt.org/vuln/ghsa-6x48-j4x4-cqw3 GHSA-6x48-j4x4-cqw3 — Path Traversal in Hadoop 2026-10-02T20:48:25.607261+00:00

Affected: Maven: org.apache.hadoop:hadoop-main

Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is exploitable via the zip slip vulnerability in places that accept a zip file.

 https://cve.radiocsirt.org/vuln/gsd-2018-8009 gsd-2018-8009 2026-10-02T20:48:25.607301+00:00 gsd-2018-8009 https://cve.radiocsirt.org/vuln/rhsa-2019:3892 RHSA-2019:3892 — Red Hat Security Advisory: Red Hat Fuse 7.5.0 security update 2026-10-02T20:48:25.607320+00:00

jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) infinispan: deserialization of data in XML and JSON transcoders hadoop: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file tomcat: Host name verification missing in WebSocket client jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis activemq: ActiveMQ Client Missing TLS Hostname Verification tika: Incomplete fix allows for XML entity expansion resulting in denial of service jackson-databind: improper polymorphic deserialization of types from Jodd-db library jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver jackson-databind: arbitrary code execution in slf4j-ext class jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes jackson-databind: exfiltration/XXE in some JDK classes jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class jackson-databind: improper polymorphic deserialization in axis2-transport-jms class jackson-databind: improper polymorphic deserialization in openjpa class jackson-databind: improper polymorphic deserialization in jboss-common-core class retrofit: Directory traversal in RequestBuilder allows manipulation of resources zookeeper: Information disclosure in Apa…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770 WID-SEC-W-2022-0770 — IBM DB2: Mehrere Schwachstellen 2026-10-02T20:48:25.607430+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen