https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:19:02.714387+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02030 bdu:2022-02030 2026-10-02T17:19:02.798232+00:00 bdu:2022-02030 https://cve.radiocsirt.org/vuln/euvd-2026-237374 EUVD-2026-237374 2026-10-02T17:19:02.798283+00:00 EUVD-2026-237374 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23221 fkie_cve-2022-23221 2026-10-02T17:19:02.798298+00:00

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

 https://cve.radiocsirt.org/vuln/ghsa-45hx-wfhj-473x GHSA-45hx-wfhj-473x — Arbitrary code execution in H2 Console 2026-10-02T17:19:02.798329+00:00

Affected: Maven: com.h2database:h2

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

 https://cve.radiocsirt.org/vuln/gsd-2022-23221 gsd-2022-23221 2026-10-02T17:19:02.798353+00:00 gsd-2022-23221 https://cve.radiocsirt.org/vuln/rhsa-2022:4918 RHSA-2022:4918 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 7 2026-10-02T17:19:02.798365+00:00

jackson-databind: denial of service via a large depth of nested objects netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way h2: Remote Code Execution in Console netty: control chars in header names may lead to HTTP request smuggling xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr jboss-client: memory leakage in remote client transaction wildfly: Wildfly management of EJB Session context returns wrong caller principal with Elytron Security enabled undertow: Double AJP response for 400 from EAP 7 results in CPING failures OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646) h2: Loading of custom classes from remote servers through JNDI xerces-j2: infinite loop when handling specially crafted XML document payloads artemis-commons: Apache ActiveMQ Artemis DoS Moment.js: Path traversal in moment.locale

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-23221 UBUNTU-CVE-2022-23221 2026-10-02T17:19:02.798410+00:00

Affected: Ubuntu:Pro:16.04:LTS: h2database, Ubuntu:Pro:18.04:LTS: h2database, Ubuntu:20.04:LTS: h2database, Ubuntu:22.04:LTS: h2database

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0102 WID-SEC-W-2022-0102 — H2: Schwachstelle ermöglicht Codeausführung 2026-10-02T17:19:02.798434+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in H2 ausnutzen, um beliebigen Programmcode auszuführen.