https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:46:47.743314+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-101692 cnvd-2021-101692 2026-10-03T23:46:48.075656+00:00 cnvd-2021-101692 https://cve.radiocsirt.org/vuln/euvd-2026-270666 EUVD-2026-270666 2026-10-03T23:46:48.075695+00:00 EUVD-2026-270666 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43113 fkie_cve-2021-43113 2026-10-03T23:46:48.075710+00:00

iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in GhostscriptHelper.java.

 https://cve.radiocsirt.org/vuln/ghsa-gv87-q66h-4277 GHSA-gv87-q66h-4277 — Command injection in itext7-core 2026-10-03T23:46:48.075741+00:00

Affected: Maven: com.itextpdf:itext7-core, Maven: com.itextpdf:itextpdf

iTextPDF in iText before 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in GhostscriptHelper.java.

 https://cve.radiocsirt.org/vuln/gsd-2021-43113 gsd-2021-43113 2026-10-03T23:46:48.075767+00:00 gsd-2021-43113 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11980-1 openSUSE-SU-2024:11980-1 — itextpdf-5.5.13.3-1.1 on GA media 2026-10-03T23:46:48.075780+00:00

itextpdf-5.5.13.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-43113 UBUNTU-CVE-2021-43113 2026-10-03T23:46:48.075797+00:00

Affected: Ubuntu:24.04:LTS: libitext5-java, Ubuntu:25.10: libitext5-java, Ubuntu:26.04:LTS: libitext5-java

iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in GhostscriptHelper.java.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1807 WID-SEC-W-2023-1807 — Oracle Fusion Middleware: Mehrere Schwachstellen 2026-10-03T23:46:48.075819+00:00

Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.