https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:53:45.679005+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-04038 bdu:2020-04038 2026-10-03T15:53:45.921571+00:00 bdu:2020-04038 https://cve.radiocsirt.org/vuln/certfr-2021-avi-560 certfr-2021-avi-560 — De multiples vulnérabilités ont été découvertes dans Oracle Systems. Certaines d'entre elles permettent à un attaquant… 2026-10-03T15:53:45.921622+00:00 certfr-2021-avi-560 https://cve.radiocsirt.org/vuln/cnvd-2020-33467 cnvd-2020-33467 2026-10-03T15:53:45.921642+00:00 cnvd-2020-33467 https://cve.radiocsirt.org/vuln/euvd-2026-40004 EUVD-2026-40004 2026-10-03T15:53:45.921655+00:00 EUVD-2026-40004 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10683 fkie_cve-2020-10683 2026-10-03T15:53:45.921665+00:00

dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.

 https://cve.radiocsirt.org/vuln/ghsa-hwj3-m3p6-hj38 GHSA-hwj3-m3p6-hj38 — dom4j allows External Entities by default which might enable XXE attacks 2026-10-03T15:53:45.921696+00:00

Affected: Maven: org.dom4j:dom4j, Maven: dom4j:dom4j

dom4j before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.

Note: This advisory applies to `dom4j:dom4j` version 1.x legacy artifacts. To resolve this a change to the latest version of `org.dom4j:dom4j` is recommended.

 https://cve.radiocsirt.org/vuln/gsd-2020-10683 gsd-2020-10683 2026-10-03T15:53:45.921725+00:00 gsd-2020-10683 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0719-1 openSUSE-SU-2020:0719-1 — Security update for dom4j 2026-10-03T15:53:45.921737+00:00

Security update for dom4j

 https://cve.radiocsirt.org/vuln/rhsa-2020:3461 RHSA-2020:3461 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.2 security update 2026-10-03T15:53:45.921754+00:00

hibernate: SQL injection issue in Hibernate ORM EAP: field-name is not parsed in accordance to RFC7230 Wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution dom4j: XML External Entity vulnerability in default SAX parser Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests hibernate-validator: Improper input validation in the interpolation of constraint error messages wildfly-elytron: session fixation when using FORM authentication wildfly: exposed setting of TCCL via the EmbeddedManagedProcess API wildfly: unsafe deserialization in Wildfly Enterprise Java Beans netty: compression/decompression codecs don't enforce limits on buffer allocation sizes wildfly: Some EJB transaction objects may get accumulated causing Denial of Service wildfly: EJB SessionOpenInvocations may not be removed properly after a response is received causing Denial of Service

 https://cve.radiocsirt.org/vuln/suse-su-2020:1382-1 SUSE-SU-2020:1382-1 — Security update for dom4j 2026-10-03T15:53:45.921795+00:00

Security update for dom4j

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-10683 UBUNTU-CVE-2020-10683 2026-10-03T15:53:45.921811+00:00

Affected: Ubuntu:14.04:LTS: dom4j, Ubuntu:16.04:LTS: dom4j, Ubuntu:18.04:LTS: dom4j, Ubuntu:20.04:LTS: dom4j

dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1912 WID-SEC-W-2022-1912 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-03T15:53:45.921834+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um Code zur Ausführung zu bringen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.