https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:23:57.380139+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-00970 bdu:2020-00970 2026-10-02T16:23:57.393855+00:00 bdu:2020-00970 https://cve.radiocsirt.org/vuln/certfr-2021-avi-556 certfr-2021-avi-556 — De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoqu… 2026-10-02T16:23:57.393891+00:00 certfr-2021-avi-556 https://cve.radiocsirt.org/vuln/cnvd-2019-41291 cnvd-2019-41291 2026-10-02T16:23:57.393910+00:00 cnvd-2019-41291 https://cve.radiocsirt.org/vuln/euvd-2026-55026 EUVD-2026-55026 2026-10-02T16:23:57.393922+00:00 EUVD-2026-55026 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12415 fkie_cve-2019-12415 2026-10-02T16:23:57.393932+00:00

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.

 https://cve.radiocsirt.org/vuln/ghsa-9jwc-q6j3-8g9g GHSA-9jwc-q6j3-8g9g — Improper Restriction of XML External Entity Reference in Apache POI 2026-10-02T16:23:57.393959+00:00

Affected: Maven: org.apache.poi:poi

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.

 https://cve.radiocsirt.org/vuln/gsd-2019-12415 gsd-2019-12415 2026-10-02T16:23:57.393982+00:00 gsd-2019-12415 https://cve.radiocsirt.org/vuln/rhsa-2021:5134 RHSA-2021:5134 — Red Hat Security Advisory: Red Hat Fuse 7.10.0 release and security update 2026-10-02T16:23:57.393993+00:00

nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties poi: a specially crafted Microsoft Excel document allows attacker to read files from the local filesystem mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete log4j: improper validation of certificate with host mismatch in SMTP appender batik: SSRF due to improper input validation by the NodePickerPanel xmlgraphics-commons: SSRF due to improper input validation by the XMPParser tomcat: Apache Tomcat HTTP/2 Request mix-up libthrift: potential DoS when processing untrusted payloads bouncycastle: Timing issue within the EC math library groovy: OS temporary directory leads to information disclosure tomcat: HTTP/2 request header mix-up XStream: remote code execution due to insecure XML deserialization when relying on blocklists XStream: arbitrary file deletion on the local host when unmarshalling jetty: buffer not correctly recycled in Gzip Request inflation jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS undertow: special character in query results in server errors jackson-dataformat-cbor: Unchecked allocation…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12415 UBUNTU-CVE-2019-12415 2026-10-02T16:23:57.394070+00:00

Affected: Ubuntu:16.04:LTS: libapache-poi-java, Ubuntu:18.04:LTS: libapache-poi-java, Ubuntu:20.04:LTS: libapache-poi-java, Ubuntu:22.04:LTS: libapache-poi-java, Ubuntu:24.04:LTS: libapache-poi-java, Ubuntu:25.10: libapache-poi-java, Ubuntu:26.04:LTS: libapache-poi-java

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0122 WID-SEC-W-2023-0122 — Oracle Supply Chain: Mehrere Schwachstellen 2026-10-02T16:23:57.394098+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Supply Chain ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.