https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:53:37.900748+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-04626 bdu:2020-04626 2026-10-02T19:53:38.077987+00:00 bdu:2020-04626 https://cve.radiocsirt.org/vuln/certfr-2020-avi-646 certfr-2020-avi-646 — De multiples vulnérabilités ont été découvertes dans IBM Netcool Performance Insight. Elles permettent à un attaquant d… 2026-10-02T19:53:38.078040+00:00 certfr-2020-avi-646 https://cve.radiocsirt.org/vuln/cnvd-2020-53535 cnvd-2020-53535 2026-10-02T19:53:38.078061+00:00 cnvd-2020-53535 https://cve.radiocsirt.org/vuln/euvd-2026-42175 EUVD-2026-42175 2026-10-02T19:53:38.078073+00:00 EUVD-2026-42175 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14062 fkie_cve-2020-14062 2026-10-02T19:53:38.078085+00:00

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).

 https://cve.radiocsirt.org/vuln/ghsa-c265-37vj-cwcc GHSA-c265-37vj-cwcc — Deserialization of untrusted data in Jackson Databind 2026-10-02T19:53:38.078112+00:00

Affected: Maven: com.fasterxml.jackson.core:jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).

 https://cve.radiocsirt.org/vuln/gsd-2020-14062 gsd-2020-14062 2026-10-02T19:53:38.078135+00:00 gsd-2020-14062 https://cve.radiocsirt.org/vuln/rhba-2020:1494 RHBA-2020:1494 — Red Hat Bug Fix Advisory: Satellite 6.6.3 Async Bug Fix Update 2026-10-02T19:53:38.078146+00:00

jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. jackson-databind: lacks certain net.sf.ehcache blocking jackson-databind: Lacks certain xbean-reflect/JNDI blocking jackson-databind: Serialization gadgets in shaded-hikari-config jackson-databind: Serialization gadgets in ibatis-sqlmap jackson-databind: Serialization gadgets in anteros-core jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider jackson-databind: Serialization gadgets in javax.swing.JEditorPane jackson-databind: Serialization gadgets in org.springframework:spring-aop jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool jackson-databind: serialization in weblogic/oracle-aqjms jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-14062 UBUNTU-CVE-2020-14062 2026-10-02T19:53:38.078185+00:00

Affected: Ubuntu:Pro:14.04:LTS: jackson-databind, Ubuntu:Pro:16.04:LTS: jackson-databind, Ubuntu:18.04:LTS: jackson-databind, Ubuntu:20.04:LTS: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794 WID-SEC-W-2024-0794 — Dell ECS: Mehrere Schwachstellen 2026-10-02T19:53:38.078209+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.