https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:35:42.154919+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-556 certfr-2021-avi-556 — De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoqu… 2026-10-03T14:35:42.301059+00:00 certfr-2021-avi-556 https://cve.radiocsirt.org/vuln/cnvd-2021-14152 cnvd-2021-14152 2026-10-03T14:35:42.301102+00:00 cnvd-2021-14152 https://cve.radiocsirt.org/vuln/euvd-2026-257611 EUVD-2026-257611 2026-10-03T14:35:42.301117+00:00 EUVD-2026-257611 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11987 fkie_cve-2020-11987 2026-10-03T14:35:42.301129+00:00

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

 https://cve.radiocsirt.org/vuln/ghsa-2h63-qp69-fwvw GHSA-2h63-qp69-fwvw — Server-side request forgery (SSRF) in Apache Batik 2026-10-03T14:35:42.301158+00:00

Affected: Maven: org.apache.xmlgraphics:batik-svgbrowser

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

 https://cve.radiocsirt.org/vuln/gsd-2020-11987 gsd-2020-11987 2026-10-03T14:35:42.301182+00:00 gsd-2020-11987 https://cve.radiocsirt.org/vuln/oesa-2021-1134 OESA-2021-1134 — batik security update 2026-10-03T14:35:42.301193+00:00

Affected: openEuler:20.03-LTS-SP1: batik

Batik is an inline templating engine for CoffeeScript, inspired by CoffeeKup, that lets you write your template directly as a CoffeeScript function. Security Fix(es): Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.(CVE-2020-11987)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12402-1 openSUSE-SU-2024:12402-1 — xmlgraphics-batik-1.15-2.1 on GA media 2026-10-03T14:35:42.301214+00:00

xmlgraphics-batik-1.15-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2021:5134 RHSA-2021:5134 — Red Hat Security Advisory: Red Hat Fuse 7.10.0 release and security update 2026-10-03T14:35:42.301232+00:00

nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties poi: a specially crafted Microsoft Excel document allows attacker to read files from the local filesystem mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete log4j: improper validation of certificate with host mismatch in SMTP appender batik: SSRF due to improper input validation by the NodePickerPanel xmlgraphics-commons: SSRF due to improper input validation by the XMPParser tomcat: Apache Tomcat HTTP/2 Request mix-up libthrift: potential DoS when processing untrusted payloads bouncycastle: Timing issue within the EC math library groovy: OS temporary directory leads to information disclosure tomcat: HTTP/2 request header mix-up XStream: remote code execution due to insecure XML deserialization when relying on blocklists XStream: arbitrary file deletion on the local host when unmarshalling jetty: buffer not correctly recycled in Gzip Request inflation jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS undertow: special character in query results in server errors jackson-dataformat-cbor: Unchecked allocation…

 https://cve.radiocsirt.org/vuln/suse-su-2024:0777-1 SUSE-SU-2024:0777-1 — Security update for xmlgraphics-batik 2026-10-03T14:35:42.301340+00:00

Security update for xmlgraphics-batik

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11987 UBUNTU-CVE-2020-11987 2026-10-03T14:35:42.301358+00:00

Affected: Ubuntu:Pro:14.04:LTS: batik, Ubuntu:Pro:16.04:LTS: batik, Ubuntu:18.04:LTS: batik, Ubuntu:20.04:LTS: batik, Ubuntu:24.04:LTS: batik, Ubuntu:25.10: batik, Ubuntu:26.04:LTS: batik

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0027 WID-SEC-W-2023-0027 — IBM Tivoli Network Manager: Mehrere Schwachstellen 2026-10-03T14:35:42.301385+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und nicht spezifizierte Auswirkungen zu verursachen.