https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:49:50.053642+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-02254 bdu:2020-02254 2026-10-02T22:49:50.116444+00:00 bdu:2020-02254 https://cve.radiocsirt.org/vuln/certfr-2021-avi-943 certfr-2021-avi-943 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T22:49:50.116499+00:00 certfr-2021-avi-943 https://cve.radiocsirt.org/vuln/cnvd-2019-42444 cnvd-2019-42444 2026-10-02T22:49:50.116520+00:00 cnvd-2019-42444 https://cve.radiocsirt.org/vuln/euvd-2026-53396 EUVD-2026-53396 2026-10-02T22:49:50.116534+00:00 EUVD-2026-53396 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10172 fkie_cve-2019-10172 2026-10-02T22:49:50.116545+00:00

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

 https://cve.radiocsirt.org/vuln/ghsa-r6j9-8759-g62w GHSA-r6j9-8759-g62w — Improper Restriction of XML External Entity Reference in jackson-mapper-asl 2026-10-02T22:49:50.116574+00:00

Affected: Maven: org.codehaus.jackson:jackson-mapper-asl

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar to CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

 https://cve.radiocsirt.org/vuln/gsd-2019-10172 gsd-2019-10172 2026-10-02T22:49:50.116598+00:00 gsd-2019-10172 https://cve.radiocsirt.org/vuln/oesa-2021-1342 OESA-2021-1342 — jackson security update 2026-10-02T22:49:50.116609+00:00

Affected: openEuler:20.03-LTS-SP1: jackson, openEuler:20.03-LTS-SP2: jackson

JSON processor written in Java., it also offers full node-based Tree Model, as well as full Object/Json Mapper data binding functionality. Security Fix(es): A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.(CVE-2019-10172)

 https://cve.radiocsirt.org/vuln/rhsa-2020:2058 RHSA-2020:2058 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.8 on RHEL 6 security update 2026-10-02T22:49:50.116632+00:00

jackson-mapper-asl: XML external entity similar to CVE-2016-3720 cxf: OpenId Connect token service does not properly validate the clientId cxf: reflected XSS in the services listing page Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader Soteria: security identity corruption across concurrent threads undertow: AJP File Read/Inclusion Vulnerability undertow: servletPath is normalized incorrectly leading to dangerous application mapping which could result in security bypass cryptacular: excessive memory allocation during a decode operation undertow: Memory exhaustion issue in HttpReadListener via "Expect: 100-continue" header undertow: invalid HTTP request with large chunk size

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10172 UBUNTU-CVE-2019-10172 2026-10-02T22:49:50.116669+00:00

Affected: Ubuntu:Pro:14.04:LTS: libjackson-json-java, Ubuntu:16.04:LTS: libjackson-json-java, Ubuntu:18.04:LTS: libjackson-json-java, Ubuntu:20.04:LTS: libjackson-json-java

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770 WID-SEC-W-2022-0770 — IBM DB2: Mehrere Schwachstellen 2026-10-02T22:49:50.116694+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen