https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:17:05.177158+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-14163 cnvd-2021-14163 2026-10-04T04:17:05.287087+00:00 cnvd-2021-14163 https://cve.radiocsirt.org/vuln/euvd-2026-46421 EUVD-2026-46421 2026-10-04T04:17:05.287131+00:00 EUVD-2026-46421 https://cve.radiocsirt.org/vuln/fkie_cve-2020-27222 fkie_cve-2020-27222 2026-10-04T04:17:05.287146+00:00

In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS server side sticks to a wrong internal state. That wrong internal state is set by a previous certificate based DTLS handshake failure with TLS parameter mismatch. The DTLS server side must be restarted to recover this. This allow clients to force a DoS.

 https://cve.radiocsirt.org/vuln/ghsa-wfcg-xg9m-fp2f GHSA-wfcg-xg9m-fp2f 2026-10-04T04:17:05.287178+00:00

In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because it sticks to a wrong internal state. That wrong internal state is set by a previous certificate based DTLS handshakes failure with TLS parameter mismatch. The server must be restarted to recover this. This allow clients to force a DoS.

 https://cve.radiocsirt.org/vuln/gsd-2020-27222 gsd-2020-27222 2026-10-04T04:17:05.287206+00:00 gsd-2020-27222 https://cve.radiocsirt.org/vuln/rhsa-2021:3205 RHSA-2021:3205 — Red Hat Security Advisory: Red Hat Integration Camel-K 1.4 release and security update 2026-10-04T04:17:05.287233+00:00

activemq: improper authentication allows MITM attack cxf: XSS via the styleSheetPath apache-flink: directory traversal attack allows remote file writing through the REST API groovy: OS temporary directory leads to information disclosure XStream: remote code execution due to insecure XML deserialization when relying on blocklists cron-utils: template injection allows attackers to inject arbitrary Java EL expressions leading to remote code execution XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling XStream: arbitrary file deletion on the local host when unmarshalling californium-core: DTLS - DoS vulnerability for certificate based handshakes undertow: special character in query results in server errors bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible kotlin: vulnerable Java API was used for temporary file and folder creation which could result in information disclosure fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise spring-web: (re)creating the temporary storage directory could result in a privilege escalation within WebFlux application pdfbox: infinite loop while loading a crafted PDF file pdfbox: OutOfMemory-Exception while loading a crafted PDF file CXF: Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter pdfbox: OutOfMemory-Exception while loading a crafted PDF file