https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:27:10.296883+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07907 bdu:2023-07907 2026-10-02T16:27:10.353515+00:00 bdu:2023-07907 https://cve.radiocsirt.org/vuln/certfr-2022-avi-366 certfr-2022-avi-366 — De multiples vulnérabilités ont été découvertes dans Oracle PeopleSoft. Certaines d'entre elles permettent à un attaqua… 2026-10-02T16:27:10.353559+00:00 certfr-2022-avi-366 https://cve.radiocsirt.org/vuln/euvd-2026-31313 EUVD-2026-31313 2026-10-02T16:27:10.353580+00:00 EUVD-2026-31313 https://cve.radiocsirt.org/vuln/fkie_cve-2021-40690 fkie_cve-2021-40690 2026-10-02T16:27:10.353592+00:00

All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.

 https://cve.radiocsirt.org/vuln/ghsa-j8wc-gxx9-82hx GHSA-j8wc-gxx9-82hx — Exposure of Sensitive Information to an Unauthorized Actor in Apache Santuario 2026-10-02T16:27:10.353623+00:00

Affected: Maven: org.apache.santuario:xmlsec

All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.

 https://cve.radiocsirt.org/vuln/gsd-2021-40690 gsd-2021-40690 2026-10-02T16:27:10.353649+00:00 gsd-2021-40690 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11693-1 openSUSE-SU-2024:11693-1 — xml-security-2.1.7-1.1 on GA media 2026-10-02T16:27:10.353660+00:00

xml-security-2.1.7-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2021:4679 RHSA-2021:4679 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.2 security update 2026-10-02T16:27:10.353678+00:00

undertow: potential security issue in flow control over HTTP/2 may lead to DOS wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users resteasy: Error message exposes endpoint class information mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck xml-security: XPath Transform abuse allows for information disclosure

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-40690 UBUNTU-CVE-2021-40690 2026-10-02T16:27:10.353702+00:00

Affected: Ubuntu:16.04:LTS: libxml-security-java, Ubuntu:18.04:LTS: libxml-security-java, Ubuntu:20.04:LTS: libxml-security-java

All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0607 WID-SEC-W-2022-0607 — Red Hat FUSE: Mehrere Schwachstellen 2026-10-02T16:27:10.353725+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.