https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:45:43.376316+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-00919 bdu:2021-00919 2026-10-04T17:45:43.506358+00:00 bdu:2021-00919 https://cve.radiocsirt.org/vuln/certfr-2021-avi-044 certfr-2021-avi-044 — De multiples vulnérabilités ont été découvertes dans Oracle MySQL. Elles permettent à un attaquant de provoquer un déni… 2026-10-04T17:45:43.506394+00:00 certfr-2021-avi-044 https://cve.radiocsirt.org/vuln/euvd-2026-184819 EUVD-2026-184819 2026-10-04T17:45:43.506413+00:00 EUVD-2026-184819 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5421 fkie_cve-2020-5421 2026-10-04T17:45:43.506425+00:00

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.

 https://cve.radiocsirt.org/vuln/ghsa-rv39-3qh7-9v7w GHSA-rv39-3qh7-9v7w — Improper Input Validation in Spring Framework 2026-10-04T17:45:43.506452+00:00

Affected: Maven: org.springframework:spring-framework-bom

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.

 https://cve.radiocsirt.org/vuln/gsd-2020-5421 gsd-2020-5421 2026-10-04T17:45:43.506479+00:00 gsd-2020-5421 https://cve.radiocsirt.org/vuln/rhsa-2021:3140 RHSA-2021:3140 — Red Hat Security Advisory: Red Hat Fuse 7.9.0 release and security update 2026-10-04T17:45:43.506490+00:00

log4j: Socket receiver deserialization vulnerability snakeyaml: Billion laughs attack via alias feature apache-commons-compress: Infinite loop in name encoding algorithm wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in use netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class olingo-odata: Server side request forgery in AsyncResponseWrapperImpl tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability spring-cloud-config-server: sending a request using a specially crafted URL can lead to a directory traversal attack springframework: RFD protection bypass via jsessionid Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371 tomcat: deserialization flaw in session persistence storage leading to RCE RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack hibernate-validator: Improper input validation in the interpolation of constraint error messages wildfly-elytron: session fixation when using FORM authentication undertow: invalid HTTP request with large chunk size tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS a…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-5421 UBUNTU-CVE-2020-5421 2026-10-04T17:45:43.506599+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0067 WID-SEC-W-2023-0067 — Oracle MySQL: Mehrere Schwachstellen 2026-10-04T17:45:43.506633+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.