https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:05:26.899599+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-spark-2022-31777 BIT-spark-2022-31777 — Apache Spark XSS vulnerability in log viewer UI Javascript 2026-10-03T04:05:27.012958+00:00

Affected: Bitnami: spark

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T04:05:27.013014+00:00 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/euvd-2026-237755 EUVD-2026-237755 2026-10-03T04:05:27.013036+00:00 EUVD-2026-237755 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31777 fkie_cve-2022-31777 2026-10-03T04:05:27.013050+00:00

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

 https://cve.radiocsirt.org/vuln/ghsa-43xg-8wmj-cw8h GHSA-43xg-8wmj-cw8h — Apache Spark vulnerable to Log Injection 2026-10-03T04:05:27.013074+00:00

Affected: PyPI: pyspark, Maven: org.apache.spark:spark-core_2.9.3, Maven: org.apache.spark:spark-core_2.13, Maven: org.apache.spark:spark-core_2.12, Maven: org.apache.spark:spark-core_2.11, Maven: org.apache.spark:spark-core_2.10

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

 https://cve.radiocsirt.org/vuln/gsd-2022-31777 gsd-2022-31777 2026-10-03T04:05:27.013107+00:00 gsd-2022-31777 https://cve.radiocsirt.org/vuln/pysec-2022-42976 PYSEC-2022-42976 2026-10-03T04:05:27.013120+00:00

Affected: PyPI: pyspark

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.

 https://cve.radiocsirt.org/vuln/rhsa-2023:2100 RHSA-2023:2100 — Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.1 security update 2026-10-03T04:05:27.013139+00:00

apache-commons-net: FTP client trusts the host from PASV response by default undertow: Server identity in https connection is not checked by the undertow client snakeyaml: Denial of Service due to missing nested depth limitation for collections apache-spark: XSS vulnerability in log viewer UI Javascript Pulsar: Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM apache-ivy: Directory Traversal Ivy: Ivy Path traversal batik: Server-Side Request Forgery batik: Server-Side Request Forgery snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode scandium: Failing DTLS handshakes may cause throttling to block processing of records batik: Server-Side Request Forgery (SSRF) vulnerability jettison: memory exhaustion via user-supplied XML or JSON data xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks batik: Apache XML Graphics Batik vulnerable to code execution via SVG JXPath: untrusted XPath expressions may lead to RCE attack hsqldb: Untrusted input may lead to RC…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1142 WID-SEC-W-2023-1142 — Red Hat Integration Camel for Spring Boot: Mehrere Schwachstellen 2026-10-03T04:05:27.013206+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Integration Camel for Spring Boot ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität zu gefährden.