https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:37:17.899989+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01018 bdu:2021-01018 2026-10-02T18:37:17.915459+00:00 bdu:2021-01018 https://cve.radiocsirt.org/vuln/certfr-2020-avi-531 certfr-2020-avi-531 — Une vulnérabilité a été découverte dans IBM WebSphere. Elle permet à un attaquant de provoquer un contournement de la p… 2026-10-02T18:37:17.915500+00:00 certfr-2020-avi-531 https://cve.radiocsirt.org/vuln/cnvd-2020-44096 cnvd-2020-44096 2026-10-02T18:37:17.915519+00:00 cnvd-2020-44096 https://cve.radiocsirt.org/vuln/euvd-2026-58423 EUVD-2026-58423 2026-10-02T18:37:17.915531+00:00 EUVD-2026-58423 https://cve.radiocsirt.org/vuln/fkie_cve-2019-17566 fkie_cve-2019-17566 2026-10-02T18:37:17.915541+00:00

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

 https://cve.radiocsirt.org/vuln/ghsa-cmx4-p4v5-hmr5 GHSA-cmx4-p4v5-hmr5 — Server-side request forgery (SSRF) in Apache Batik 2026-10-02T18:37:17.915598+00:00

Affected: Maven: org.apache.xmlgraphics:batik

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

 https://cve.radiocsirt.org/vuln/gsd-2019-17566 gsd-2019-17566 2026-10-02T18:37:17.915659+00:00 gsd-2019-17566 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0851-1 openSUSE-SU-2020:0851-1 — Security update for xmlgraphics-batik 2026-10-02T18:37:17.915689+00:00

Security update for xmlgraphics-batik

 https://cve.radiocsirt.org/vuln/rhsa-2020:4960 RHSA-2020:4960 — Red Hat Security Advisory: Red Hat Decision Manager 7.9.0 security update 2026-10-02T18:37:17.915708+00:00

hibernate: SQL injection issue in Hibernate ORM batik: SSRF via "xlink:href" Wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain ant: insecure temporary file vulnerability cxf: JMX integration is vulnerable to a MITM attack mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete mysql-connector-java: allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized partial DoS mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete dom4j: XML External Entity vulnerability in default SAX parser hibernate-validator: Improper input validation in the interpolation of constraint error messages wildfly-elytron: session fixation when using FORM authentication

 https://cve.radiocsirt.org/vuln/suse-su-2020:1800-1 SUSE-SU-2020:1800-1 — Security update for xmlgraphics-batik 2026-10-02T18:37:17.915744+00:00

Security update for xmlgraphics-batik

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-17566 UBUNTU-CVE-2019-17566 2026-10-02T18:37:17.915759+00:00

Affected: Ubuntu:Pro:14.04:LTS: batik, Ubuntu:Pro:16.04:LTS: batik, Ubuntu:18.04:LTS: batik, Ubuntu:20.04:LTS: batik

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0027 WID-SEC-W-2023-0027 — IBM Tivoli Network Manager: Mehrere Schwachstellen 2026-10-02T18:37:17.915782+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und nicht spezifizierte Auswirkungen zu verursachen.