https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:09:47.522297+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-02853 bdu:2020-02853 2026-10-03T07:09:47.854957+00:00 bdu:2020-02853 https://cve.radiocsirt.org/vuln/certfr-2020-avi-179 certfr-2020-avi-179 — Une vulnérabilité a été découverte dans plusieurs produits de Red Hat. Elle permet à un attaquant de provoquer une exéc… 2026-10-03T07:09:47.855014+00:00 certfr-2020-avi-179 https://cve.radiocsirt.org/vuln/euvd-2026-35587 EUVD-2026-35587 2026-10-03T07:09:47.855036+00:00 EUVD-2026-35587 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1745 fkie_cve-2020-1745 2026-10-03T07:09:47.855066+00:00

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-gv2w-88hx-8m9r GHSA-gv2w-88hx-8m9r — Improper Authorization in Undertoe 2026-10-03T07:09:47.855101+00:00

Affected: Maven: io.undertow:undertow-core

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.

 https://cve.radiocsirt.org/vuln/gsd-2020-1745 gsd-2020-1745 2026-10-03T07:09:47.855128+00:00 gsd-2020-1745 https://cve.radiocsirt.org/vuln/rhsa-2020:0812 RHSA-2020:0812 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2 security update 2026-10-03T07:09:47.855140+00:00

undertow: AJP File Read/Inclusion Vulnerability

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1745 UBUNTU-CVE-2020-1745 2026-10-03T07:09:47.855160+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen 2026-10-03T07:09:47.855190+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.