https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:34:31.432437+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:9318 ALSA-2025:9318 — Important: javapackages-tools:201801 security update 2026-10-02T11:34:32.022122+00:00

Affected: AlmaLinux:8: ant, AlmaLinux:8: ant-antlr, AlmaLinux:8: ant-apache-bcel, AlmaLinux:8: ant-apache-bsf, AlmaLinux:8: ant-apache-log4j, AlmaLinux:8: ant-apache-oro, AlmaLinux:8: ant-apache-regexp, AlmaLinux:8: ant-apache-resolver, AlmaLinux:8: ant-apache-xalan2, AlmaLinux:8: ant-commons-logging and 500 more

The javapackages-tools packages provide macros and scripts to support Java packaging.

Security Fix(es):

* apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default (CVE-2019-10086) * commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (CVE-2025-48734)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2020-01020 bdu:2020-01020 2026-10-02T11:34:32.022755+00:00 bdu:2020-01020 https://cve.radiocsirt.org/vuln/certfr-2020-avi-433 certfr-2020-avi-433 — De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Certaines d'entre elles permettent à un at… 2026-10-02T11:34:32.022780+00:00 certfr-2020-avi-433 https://cve.radiocsirt.org/vuln/cnvd-2019-42779 cnvd-2019-42779 2026-10-02T11:34:32.022797+00:00 cnvd-2019-42779 https://cve.radiocsirt.org/vuln/euvd-2026-53346 EUVD-2026-53346 2026-10-02T11:34:32.022809+00:00 EUVD-2026-53346 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10086 fkie_cve-2019-10086 2026-10-02T11:34:32.022820+00:00

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.

 https://cve.radiocsirt.org/vuln/ghsa-6phf-73q6-gh87 GHSA-6phf-73q6-gh87 — Insecure Deserialization in Apache Commons Beanutils 2026-10-02T11:34:32.022843+00:00

Affected: Maven: commons-beanutils:commons-beanutils

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.

 https://cve.radiocsirt.org/vuln/gsd-2019-10086 gsd-2019-10086 2026-10-02T11:34:32.022865+00:00 gsd-2019-10086 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2058-1 openSUSE-SU-2019:2058-1 — Security update for apache-commons-beanutils 2026-10-02T11:34:32.022876+00:00

Security update for apache-commons-beanutils

 https://cve.radiocsirt.org/vuln/rhba-2020:0496 RHBA-2020:0496 — Red Hat Bug Fix Advisory: Satellite 6.6.2 Async Bug Fix Update 2026-10-02T11:34:32.022894+00:00

apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default

 https://cve.radiocsirt.org/vuln/suse-su-2019:2244-1 SUSE-SU-2019:2244-1 — Security update for apache-commons-beanutils 2026-10-02T11:34:32.022910+00:00

Security update for apache-commons-beanutils

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10086 UBUNTU-CVE-2019-10086 2026-10-02T11:34:32.022925+00:00

Affected: Ubuntu:Pro:14.04:LTS: commons-beanutils, Ubuntu:Pro:16.04:LTS: commons-beanutils, Ubuntu:Pro:18.04:LTS: commons-beanutils

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770 WID-SEC-W-2022-0770 — IBM DB2: Mehrere Schwachstellen 2026-10-02T11:34:32.022948+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen