https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:38:50.060521+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0512 certfr-2025-avi-0512 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T12:38:50.151851+00:00 certfr-2025-avi-0512 https://cve.radiocsirt.org/vuln/cnvd-2022-76237 cnvd-2022-76237 2026-10-03T12:38:50.151892+00:00 cnvd-2022-76237 https://cve.radiocsirt.org/vuln/euvd-2026-24881 EUVD-2026-24881 2026-10-03T12:38:50.151908+00:00 EUVD-2026-24881 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25642 fkie_cve-2021-25642 2026-10-03T12:38:50.151920+00:00

ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from ZooKeeper without validation. An attacker having access to ZooKeeper can run arbitrary commands as YARN user by exploiting this. Users should upgrade to Apache Hadoop 2.10.2, 3.2.4, 3.3.4 or later (containing YARN-11126) if ZKConfigurationStore is used.

 https://cve.radiocsirt.org/vuln/ghsa-rr2m-gffv-mgrj GHSA-rr2m-gffv-mgrj — Deserialization of Untrusted Data in Apache Hadoop YARN 2026-10-03T12:38:50.151950+00:00

Affected: Maven: org.apache.hadoop:hadoop-yarn-server

ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from ZooKeeper without validation. An attacker having access to ZooKeeper can run arbitrary commands as YARN user by exploiting this. Users should upgrade to Apache Hadoop 2.10.2, 3.2.4, 3.3.4 or later (containing YARN-11126) if ZKConfigurationStore is used.

 https://cve.radiocsirt.org/vuln/gsd-2021-25642 gsd-2021-25642 2026-10-03T12:38:50.151975+00:00 gsd-2021-25642 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794 WID-SEC-W-2024-0794 — Dell ECS: Mehrere Schwachstellen 2026-10-03T12:38:50.151987+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.