https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:17:42.061578+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-951 certfr-2021-avi-951 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de RedHat. Certaines d'entre elles permettent à un… 2026-10-03T16:17:42.085140+00:00 certfr-2021-avi-951 https://cve.radiocsirt.org/vuln/cnvd-2021-70100 cnvd-2021-70100 2026-10-03T16:17:42.085186+00:00 cnvd-2021-70100 https://cve.radiocsirt.org/vuln/euvd-2026-26840 EUVD-2026-26840 2026-10-03T16:17:42.085202+00:00 EUVD-2026-26840 https://cve.radiocsirt.org/vuln/fkie_cve-2021-30468 fkie_cve-2021-30468 2026-10-03T16:17:42.085214+00:00

A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an infinite loop, consuming CPU indefinitely. This issue affects Apache CXF versions prior to 3.4.4; Apache CXF versions prior to 3.3.11.

 https://cve.radiocsirt.org/vuln/ghsa-g23v-p5jq-jvh4 GHSA-g23v-p5jq-jvh4 — Infinite loop in Apache CFX 2026-10-03T16:17:42.085254+00:00

Affected: Maven: org.apache.cxf:apache-cxf, Maven: org.apache.cxf:cxf

A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an infinite loop, consuming CPU indefinitely. This issue affects Apache CXF versions prior to 3.4.4; Apache CXF versions prior to 3.3.11.

 https://cve.radiocsirt.org/vuln/gsd-2021-30468 gsd-2021-30468 2026-10-03T16:17:42.085352+00:00 gsd-2021-30468 https://cve.radiocsirt.org/vuln/rhsa-2021:3205 RHSA-2021:3205 — Red Hat Security Advisory: Red Hat Integration Camel-K 1.4 release and security update 2026-10-03T16:17:42.085381+00:00

activemq: improper authentication allows MITM attack cxf: XSS via the styleSheetPath apache-flink: directory traversal attack allows remote file writing through the REST API groovy: OS temporary directory leads to information disclosure XStream: remote code execution due to insecure XML deserialization when relying on blocklists cron-utils: template injection allows attackers to inject arbitrary Java EL expressions leading to remote code execution XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling XStream: arbitrary file deletion on the local host when unmarshalling californium-core: DTLS - DoS vulnerability for certificate based handshakes undertow: special character in query results in server errors bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible kotlin: vulnerable Java API was used for temporary file and folder creation which could result in information disclosure fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise spring-web: (re)creating the temporary storage directory could result in a privilege escalation within WebFlux application pdfbox: infinite loop while loading a crafted PDF file pdfbox: OutOfMemory-Exception while loading a crafted PDF file CXF: Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter pdfbox: OutOfMemory-Exception while loading a crafted PDF file

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0227 WID-SEC-W-2025-0227 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-03T16:17:42.085437+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.