https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:57:14.809306+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-00714 bdu:2021-00714 2026-10-03T10:57:15.114050+00:00 bdu:2021-00714 https://cve.radiocsirt.org/vuln/certfr-2021-avi-943 certfr-2021-avi-943 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T10:57:15.114107+00:00 certfr-2021-avi-943 https://cve.radiocsirt.org/vuln/cnvd-2020-24668 cnvd-2020-24668 2026-10-03T10:57:15.114128+00:00 cnvd-2020-24668 https://cve.radiocsirt.org/vuln/euvd-2026-251082 EUVD-2026-251082 2026-10-03T10:57:15.114141+00:00 EUVD-2026-251082 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10673 fkie_cve-2020-10673 2026-10-03T10:57:15.114152+00:00

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).

 https://cve.radiocsirt.org/vuln/ghsa-fqwf-pjwf-7vqv GHSA-fqwf-pjwf-7vqv — jackson-databind mishandles the interaction between serialization gadgets and typing 2026-10-03T10:57:15.114182+00:00

Affected: Maven: com.fasterxml.jackson.core:jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.4 and 2.6.7.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).

 https://cve.radiocsirt.org/vuln/gsd-2020-10673 gsd-2020-10673 2026-10-03T10:57:15.114207+00:00 gsd-2020-10673 https://cve.radiocsirt.org/vuln/rhsa-2020:1644 RHSA-2020:1644 — Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update 2026-10-03T10:57:15.114219+00:00

jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* jackson-databind: lacks certain net.sf.ehcache blocking jackson-databind: Lacks certain xbean-reflect/JNDI blocking jackson-databind: Serialization gadgets in shaded-hikari-config jackson-databind: Serialization gadgets in ibatis-sqlmap jackson-databind: Serialization gadgets in anteros-core jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution

 https://cve.radiocsirt.org/vuln/rhsa-2020:2067 RHSA-2020:2067 — Red Hat Security Advisory: Red Hat build of Thorntail 2.5.1 security and bug fix update 2026-10-03T10:57:15.114261+00:00

thrift: Endless loop when feed with specific input data thrift: Out-of-bounds read related to TJSONProtocol or TSimpleJSONProtocol keycloak: missing signatures validation on CRL used to verify client certificates HTTP/2: large amount of data requests leads to denial of service HTTP/2: flood using PING frames results in unbounded memory growth HTTP/2: flood using HEADERS frames results in unbounded memory growth HTTP/2: flood using SETTINGS frames results in unbounded memory growth apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default keycloak: CSRF check missing in My Resources functionality in the Account Console keycloak: SAML broker does not check existence of signature on document allowing any user impersonation hibernate-validator: safeHTML validator allows XSS xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source cxf: does not restrict the number of message attachments cxf: OpenId Connect token service does not properly validate the clientId jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig keycloak: adapter endpoints are exposed via arbitrary URLs keycloak: cross-realm user access auth bypass wildfly-core: Incorrect privileges for 'Monitor', 'Auditor' and 'Deployer' user by default wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in use undertow: possible Denial Of Service (DOS) in Undertow HTTP server listen…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-10673 UBUNTU-CVE-2020-10673 2026-10-03T10:57:15.114356+00:00

Affected: Ubuntu:Pro:14.04:LTS: jackson-databind, Ubuntu:Pro:16.04:LTS: jackson-databind, Ubuntu:18.04:LTS: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1912 WID-SEC-W-2022-1912 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-03T10:57:15.114379+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um Code zur Ausführung zu bringen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.