https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:47:13.006964+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-1025 certfr-2022-avi-1025 — De multiples vulnérabilités ont été découvertes dans IBM QRadar. Certaines d'entre elles permettent à un attaquant de p… 2026-10-03T21:47:13.077726+00:00 certfr-2022-avi-1025 https://cve.radiocsirt.org/vuln/euvd-2026-32155 EUVD-2026-32155 2026-10-03T21:47:13.077769+00:00 EUVD-2026-32155 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42581 fkie_cve-2021-42581 2026-10-03T21:47:13.077784+00:00

Prototype poisoning in function mapObjIndexed in Ramda 0.27.0 and earlier allows attackers to compromise integrity or availability of application via supplying a crafted object (that contains an own property "__proto__") as an argument to the function. NOTE: the vendor disputes this because the observed behavior only means that a user can create objects that the user didn't know would contain custom prototypes

 https://cve.radiocsirt.org/vuln/ghsa-x9wq-pxpv-8p4v GHSA-x9wq-pxpv-8p4v 2026-10-03T21:47:13.077815+00:00

Prototype poisoning in function mapObjIndexed in Ramda 0.27.0 and earlier allows attackers to compromise integrity or availability of application via supplying a crafted object (that contains an own property "__proto__") as an argument to the function.

 https://cve.radiocsirt.org/vuln/gsd-2021-42581 gsd-2021-42581 2026-10-03T21:47:13.077831+00:00 gsd-2021-42581 https://cve.radiocsirt.org/vuln/rhsa-2023:3642 RHSA-2023:3642 — Red Hat Security Advisory: Red Hat Ceph Storage 6.1 Container security and bug fix update 2026-10-03T21:47:13.077841+00:00

ramda: prototype poisoning eventsource: Exposure of Sensitive Information golang: net/http: improper sanitization of Transfer-Encoding header golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters marked: regular expression block.def may lead Denial of Service marked: regular expression inline.reflinkSearch may lead Denial of Service grafana: Use of Cache Containing Sensitive Information golang: encoding/pem: fix stack overflow in Decode Moment.js: Path traversal in moment.locale grafana: An information leak issue was discovered in Grafana through 7.3.4, when integrated with Zabbix golang: net/http: handle server errors after sending GOAWAY golang: encoding/xml: stack exhaustion in Decoder.Skip golang: crypto/elliptic: panic caused by oversized scalar golang: syscall: faccessat checks wrong group golang: crypto/tls: session tickets lack random ticket_age_add golang: io/fs: stack exhaustion in Glob golang: compress/gzip: stack exhaustion in Reader.Read golang: path/filepath: stack exhaustion in Glob golang: encoding/xml: stack exhaustion in Unmarshal golang: encoding/gob: stack exhaustion in Decoder.Decode grafana: stored XSS vulnerability grafana: OAuth account takeover grafana: plugin signature bypass grafana: data source and plugin proxy endpoints leaking authentication tokens to some destination plugins golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working golang: math/big: decoding big.Float and big.Rat…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0809 WID-SEC-W-2023-0809 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-03T21:47:13.077894+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Informationen falsch darzustellen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.