https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:23:44.115413+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-01228 bdu:2022-01228 2026-10-04T12:23:44.132755+00:00 bdu:2022-01228 https://cve.radiocsirt.org/vuln/certfr-2021-avi-505 certfr-2021-avi-505 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum. Elles permettent à un attaquant de provoquer une exé… 2026-10-04T12:23:44.132800+00:00 certfr-2021-avi-505 https://cve.radiocsirt.org/vuln/euvd-2026-25573 EUVD-2026-25573 2026-10-04T12:23:44.132818+00:00 EUVD-2026-25573 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27568 fkie_cve-2021-27568 2026-10-04T12:23:44.132830+00:00

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.

 https://cve.radiocsirt.org/vuln/ghsa-v528-7hrm-frqp GHSA-v528-7hrm-frqp — Improper Check for Unusual or Exceptional Conditions in json-smart 2026-10-04T12:23:44.132859+00:00

Affected: Maven: net.minidev:json-smart, Maven: net.minidev:json-smart-mini

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.

 https://cve.radiocsirt.org/vuln/gsd-2021-27568 gsd-2021-27568 2026-10-04T12:23:44.132885+00:00 gsd-2021-27568 https://cve.radiocsirt.org/vuln/rhsa-2021:3140 RHSA-2021:3140 — Red Hat Security Advisory: Red Hat Fuse 7.9.0 release and security update 2026-10-04T12:23:44.132896+00:00

log4j: Socket receiver deserialization vulnerability snakeyaml: Billion laughs attack via alias feature apache-commons-compress: Infinite loop in name encoding algorithm wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in use netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class olingo-odata: Server side request forgery in AsyncResponseWrapperImpl tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability spring-cloud-config-server: sending a request using a specially crafted URL can lead to a directory traversal attack springframework: RFD protection bypass via jsessionid Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371 tomcat: deserialization flaw in session persistence storage leading to RCE RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack hibernate-validator: Improper input validation in the interpolation of constraint error messages wildfly-elytron: session fixation when using FORM authentication undertow: invalid HTTP request with large chunk size tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS a…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen 2026-10-04T12:23:44.132974+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.