https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:48:46.404118+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-00113 bdu:2024-00113 2026-10-03T06:48:46.515280+00:00 bdu:2024-00113 https://cve.radiocsirt.org/vuln/certfr-2022-avi-568 certfr-2022-avi-568 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T06:48:46.515337+00:00 certfr-2022-avi-568 https://cve.radiocsirt.org/vuln/euvd-2026-47634 EUVD-2026-47634 2026-10-03T06:48:46.515361+00:00 EUVD-2026-47634 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35491 fkie_cve-2020-35491 2026-10-03T06:48:46.515373+00:00

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.

 https://cve.radiocsirt.org/vuln/ghsa-r3gr-cxrf-hg25 GHSA-r3gr-cxrf-hg25 — Serialization gadgets exploit in jackson-databind 2026-10-03T06:48:46.515403+00:00

Affected: Maven: com.fasterxml.jackson.core:jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.

 https://cve.radiocsirt.org/vuln/gsd-2020-35491 gsd-2020-35491 2026-10-03T06:48:46.515426+00:00 gsd-2020-35491 https://cve.radiocsirt.org/vuln/oesa-2021-1014 OESA-2021-1014 — jackson-databind security update 2026-10-03T06:48:46.515438+00:00

Affected: openEuler:20.03-LTS-SP1: jackson-databind

The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration.\r\n\r\n Security Fix(es):\r\n\r\n FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.(CVE-2020-35490)\r\n\r\n FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.(CVE-2020-35491)\r\n\r\n FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).(CVE-2020-35728)\r\n\r\n FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.(CVE-2020-36185)\r\n\r\n

 https://cve.radiocsirt.org/vuln/rhsa-2021:1230 RHSA-2021:1230 — Red Hat Security Advisory: OpenShift Container Platform 4.6.26 security and extras update 2026-10-03T06:48:46.515469+00:00

jackson-databind: arbitrary code execution in slf4j-ext class jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes jackson-databind: exfiltration/XXE in some JDK classes jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class jackson-databind: improper polymorphic deserialization in axis2-transport-jms class jackson-databind: improper polymorphic deserialization in openjpa class jackson-databind: improper polymorphic deserialization in jboss-common-core class jackson-databind: default typing mishandling leading to remote code execution jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS jackson-databind:…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-35491 UBUNTU-CVE-2020-35491 2026-10-03T06:48:46.515604+00:00

Affected: Ubuntu:Pro:14.04:LTS: jackson-databind, Ubuntu:Pro:16.04:LTS: jackson-databind, Ubuntu:18.04:LTS: jackson-databind, Ubuntu:20.04:LTS: jackson-databind, Ubuntu:22.04:LTS: jackson-databind, Ubuntu:24.04:LTS: jackson-databind, Ubuntu:25.10: jackson-databind, Ubuntu:26.04:LTS: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1548 WID-SEC-W-2023-1548 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-03T06:48:46.515661+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand zu verursachen, Sicherheitsvorkehrungen zu umgehen oder sonstige Auswirkungen verursachen.