https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:06:48.018507+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-04283 bdu:2019-04283 2026-10-03T07:06:48.032778+00:00 bdu:2019-04283 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0357 certfr-2023-avi-0357 — De multiples vulnérabilités ont été découvertes dans IBM Cognos. Certaines d'entre elles permettent à un attaquant de p… 2026-10-03T07:06:48.032838+00:00 certfr-2023-avi-0357 https://cve.radiocsirt.org/vuln/euvd-2026-53458 EUVD-2026-53458 2026-10-03T07:06:48.032870+00:00 EUVD-2026-53458 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10241 fkie_cve-2019-10241 2026-10-03T07:06:48.032889+00:00

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.

 https://cve.radiocsirt.org/vuln/ghsa-7vx9-xjhr-rw6h GHSA-7vx9-xjhr-rw6h — Cross-site Scripting in Eclipse Jetty 2026-10-03T07:06:48.032935+00:00

Affected: Maven: org.eclipse.jetty:jetty-server

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.

 https://cve.radiocsirt.org/vuln/gsd-2019-10241 gsd-2019-10241 2026-10-03T07:06:48.032974+00:00 gsd-2019-10241 https://cve.radiocsirt.org/vuln/oesa-2022-2140 OESA-2022-2140 — jetty security update 2026-10-03T07:06:48.032994+00:00

Affected: openEuler:20.03-LTS-SP3: jetty

%global desc \ Jetty is a 100% Java HTTP Server and Servlet Container. This means that you\ do not need to configure and run a separate web server (like Apache) in order\ to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully\ featured web server for static and dynamic content. Unlike separate\ server/container solutions, this means that your web server and web\ application run in the same process, without interconnection overheads\ and complications. Furthermore, as a pure java component, Jetty can be simply\ included in your application for demonstration, distribution or deployment.\ Jetty is available on all Java supported platforms. \ %global extdesc \\ \ This package contains Security Fix(es): In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.(CVE-2019-10241)

 https://cve.radiocsirt.org/vuln/rhsa-2020:0922 RHSA-2020:0922 — Red Hat Security Advisory: Red Hat AMQ Broker 7.6 release and security update 2026-10-03T07:06:48.033036+00:00

activemq: Corrupt MQTT frame can cause broker shutdown HTTP/2: large amount of data requests leads to denial of service HTTP/2: flood using PING frames results in unbounded memory growth HTTP/2: flood using HEADERS frames results in unbounded memory growth HTTP/2: flood using SETTINGS frames results in unbounded memory growth HTTP/2: 0-length headers lead to denial of service HTTP/2: request for large response leads to denial of service HTTP/2: flood using empty frames results in excessive resource consumption jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions jetty: error path information disclosure netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers netty: HTTP request smuggling netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10241 UBUNTU-CVE-2019-10241 2026-10-03T07:06:48.033095+00:00

Affected: Ubuntu:14.04:LTS: jetty, Ubuntu:14.04:LTS: jetty8, Ubuntu:16.04:LTS: jetty, Ubuntu:16.04:LTS: jetty8, Ubuntu:18.04:LTS: jetty9

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.