https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:51:56.562083+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-801 certfr-2021-avi-801 — De multiples vulnérabilités ont été découvertes dans Oracle MySQL. Certaines d'entre elles permettent à un attaquant de… 2026-10-03T01:51:56.634324+00:00 certfr-2021-avi-801 https://cve.radiocsirt.org/vuln/euvd-2026-22676 EUVD-2026-22676 2026-10-03T01:51:56.634370+00:00 EUVD-2026-22676 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22112 fkie_cve-2021-22112 2026-10-03T01:51:56.634386+00:00

Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programmed in). However, if the application's intent is to only allow the user to run with elevated privileges in a small portion of the application, the bug can be leveraged to extend those privileges to the rest of the application.

 https://cve.radiocsirt.org/vuln/ghsa-gq28-h5vg-8prx GHSA-gq28-h5vg-8prx — Privilege escalation in spring security 2026-10-03T01:51:56.634421+00:00

Affected: Maven: org.springframework.security:spring-security-bom, Maven: org.springframework.security:spring-security-web

Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programmed in). However, if the application's intent is to only allow the user to run with elevated privileges in a small portion of the application, the bug can be leveraged to extend those privileges to the rest of the application.

 https://cve.radiocsirt.org/vuln/gsd-2021-22112 gsd-2021-22112 2026-10-03T01:51:56.634456+00:00 gsd-2021-22112 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen 2026-10-03T01:51:56.634469+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.