https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:04:13.001973+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-02137 bdu:2020-02137 2026-10-03T15:04:13.181134+00:00 bdu:2020-02137 https://cve.radiocsirt.org/vuln/certfr-2020-avi-433 certfr-2020-avi-433 — De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Certaines d'entre elles permettent à un at… 2026-10-03T15:04:13.181184+00:00 certfr-2020-avi-433 https://cve.radiocsirt.org/vuln/cnvd-2020-22364 cnvd-2020-22364 2026-10-03T15:04:13.181205+00:00 cnvd-2020-22364 https://cve.radiocsirt.org/vuln/euvd-2026-195659 EUVD-2026-195659 2026-10-03T15:04:13.181218+00:00 EUVD-2026-195659 https://cve.radiocsirt.org/vuln/fkie_cve-2019-13990 fkie_cve-2019-13990 2026-10-03T15:04:13.181228+00:00

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.

 https://cve.radiocsirt.org/vuln/ghsa-9qcf-c26r-x5rf GHSA-9qcf-c26r-x5rf — XML external entity injection in Terracotta Quartz Scheduler 2026-10-03T15:04:13.181256+00:00

Affected: Maven: org.quartz-scheduler:quartz

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.

 https://cve.radiocsirt.org/vuln/gsd-2019-13990 gsd-2019-13990 2026-10-03T15:04:13.181300+00:00 gsd-2019-13990 https://cve.radiocsirt.org/vuln/rhsa-2020:3196 RHSA-2020:3196 — Red Hat Security Advisory: Red Hat Decision Manager 7.8.0 Security Update 2026-10-03T15:04:13.181323+00:00

HTTP/2: flood using PING frames results in unbounded memory growth HTTP/2: flood using HEADERS frames results in unbounded memory growth HTTP/2: flood using SETTINGS frames results in unbounded memory growth HTTP/2: flood using empty frames results in excessive resource consumption cxf: does not restrict the number of message attachments cxf: OpenId Connect token service does not properly validate the clientId libquartz: XXE attacks via job description netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers cxf: reflected XSS in the services listing page jackson-databind: lacks certain net.sf.ehcache blocking netty: HTTP request smuggling netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header keycloak: security issue on reset credential flow netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling jackson-databind: Lacks certain xbean-reflect/JNDI blocking jackson-databind: Serialization gadgets in shaded-hikari-config jackson-databind: Serialization gadgets in ibatis-sqlmap jackson-databind: Serialization gadgets in anteros-core jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvide…

 https://cve.radiocsirt.org/vuln/suse-su-2020:0984-1 SUSE-SU-2020:0984-1 — Security update for quartz 2026-10-03T15:04:13.181484+00:00

Security update for quartz

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13990 UBUNTU-CVE-2019-13990 2026-10-03T15:04:13.181504+00:00

Affected: Ubuntu:16.04:LTS: libquartz-java, Ubuntu:18.04:LTS: libquartz-java, Ubuntu:18.04:LTS: libquartz2-java, Ubuntu:20.04:LTS: libquartz-java, Ubuntu:20.04:LTS: libquartz2-java, Ubuntu:22.04:LTS: libquartz-java, Ubuntu:24.04:LTS: libquartz-java, Ubuntu:25.10: libquartz-java, Ubuntu:26.04:LTS: libquartz-java

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2700 WID-SEC-W-2023-2700 — Atlassian Confluence: Mehrere Schwachstellen 2026-10-03T15:04:13.181536+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Atlassian Confluence, Atlassian Jira Software, Atlassian Bitbucket und Atlassian Bamboo ausnutzen, um Administratorrechte zu erlangen, Informationen offenzulegen, beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.