https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:21:36.951165+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-06476 bdu:2022-06476 2026-10-03T18:21:37.194366+00:00 bdu:2022-06476 https://cve.radiocsirt.org/vuln/certfr-2021-avi-490 certfr-2021-avi-490 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum Protect. Certaines d'entre elles permettent à un atta… 2026-10-03T18:21:37.194427+00:00 certfr-2021-avi-490 https://cve.radiocsirt.org/vuln/euvd-2026-258290 EUVD-2026-258290 2026-10-03T18:21:37.194466+00:00 EUVD-2026-258290 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23358 fkie_cve-2021-23358 2026-10-03T18:21:37.194491+00:00

The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.

 https://cve.radiocsirt.org/vuln/ghsa-cf4h-3jhx-xvhq GHSA-cf4h-3jhx-xvhq — Arbitrary Code Execution in underscore 2026-10-03T18:21:37.194523+00:00

Affected: npm: underscore

The package `underscore` from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Execution via the template function, particularly when a variable property is passed as an argument as it is not sanitized.

 https://cve.radiocsirt.org/vuln/gsd-2021-23358 gsd-2021-23358 2026-10-03T18:21:37.194547+00:00 gsd-2021-23358 https://cve.radiocsirt.org/vuln/msrc_cve-2021-23358 msrc_CVE-2021-23358 — Arbitrary Code Injection 2026-10-03T18:21:37.194559+00:00 msrc_CVE-2021-23358 https://cve.radiocsirt.org/vuln/oesa-2021-1174 OESA-2021-1174 — nodejs-underscore security update 2026-10-03T18:21:37.194575+00:00

Affected: openEuler:20.03-LTS-SP1: nodejs-underscore

Underscore.js is a utility-belt library for JavaScript that provides support for the usual functional suspects (each, map, reduce, filter...) without extending any core JavaScript objects. Security Fix(es): The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.(CVE-2021-23358)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0601-1 openSUSE-SU-2021:0601-1 — Security update for nodejs-underscore 2026-10-03T18:21:37.194597+00:00

Security update for nodejs-underscore

 https://cve.radiocsirt.org/vuln/oxas-adv-2025-0001 OXAS-ADV-2025-0001 — OX App Suite Security Advisory OXAS-ADV-2025-0001 2026-10-03T18:21:37.194612+00:00 OXAS-ADV-2025-0001 https://cve.radiocsirt.org/vuln/rhsa-2021:1448 RHSA-2021:1448 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.0.10 security and bug fix updates 2026-10-03T18:21:37.194627+00:00

nodejs-underscore: Arbitrary code execution via the template function

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23358 UBUNTU-CVE-2021-23358 2026-10-03T18:21:37.194643+00:00

Affected: Ubuntu:Pro:14.04:LTS: underscore, Ubuntu:16.04:LTS: underscore, Ubuntu:18.04:LTS: underscore, Ubuntu:20.04:LTS: underscore

The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1354 WID-SEC-W-2022-1354 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-03T18:21:37.194667+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.