https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:32:53.205290+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-10996 bdu:2026-10996 2026-10-04T21:32:53.322934+00:00 bdu:2026-10996 https://cve.radiocsirt.org/vuln/certfr-2022-avi-351 certfr-2022-avi-351 — De multiples vulnérabilités ont été découvertes dans les logiciels Juniper . Certaines d'entre elles permettent à un at… 2026-10-04T21:32:53.322977+00:00 certfr-2022-avi-351 https://cve.radiocsirt.org/vuln/euvd-2026-27543 EUVD-2026-27543 2026-10-04T21:32:53.323007+00:00 EUVD-2026-27543 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31597 fkie_cve-2021-31597 2026-10-04T21:32:53.323026+00:00

The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.

 https://cve.radiocsirt.org/vuln/ghsa-72mh-269x-7mh5 GHSA-72mh-269x-7mh5 — Improper Certificate Validation in xmlhttprequest-ssl 2026-10-04T21:32:53.323069+00:00

Affected: npm: xmlhttprequest-ssl

The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.

 https://cve.radiocsirt.org/vuln/gsd-2021-31597 gsd-2021-31597 2026-10-04T21:32:53.323106+00:00 gsd-2021-31597 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-31597 UBUNTU-CVE-2021-31597 2026-10-04T21:32:53.323124+00:00

Affected: Ubuntu:18.04:LTS: node-xmlhttprequest-ssl, Ubuntu:20.04:LTS: node-xmlhttprequest-ssl

The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1229 WID-SEC-W-2026-1229 — Atlassian Bamboo, Bitbucket, Confluence, Jira: Mehrere Schwachstellen 2026-10-04T21:32:53.323161+00:00

Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Atlassian Bitbucket, Atlassian Confluence und Atlassian Jira ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.