https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:31:21.770783+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-04975 bdu:2023-04975 2026-10-02T23:31:22.001485+00:00 bdu:2023-04975 https://cve.radiocsirt.org/vuln/bell-cve-2022-3510 Withdrawn: BELL-CVE-2022-3510 — CVE-2022-3510 does not affect BellSoft software 2026-10-02T23:31:22.001534+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2023-avi-0701 certfr-2023-avi-0701 — De multiples vulnérabilités ont été découvertes dans Splunk. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-02T23:31:22.001560+00:00 certfr-2023-avi-0701 https://cve.radiocsirt.org/vuln/cleanstart-2026-bf52327 CLEANSTART-2026-BF52327 — Security fix for CVE-2022-3510 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r0, spark-sc213-jdk17-py312 3.4.4-r1… 2026-10-02T23:31:22.001587+00:00

Affected: CleanStart: apache-hive, CleanStart: spark-sc213-jdk17-py312, CleanStart: stargate

CVE-2022-3510 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-232415 EUVD-2026-232415 2026-10-02T23:31:22.001639+00:00 EUVD-2026-232415 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3510 fkie_cve-2022-3510 2026-10-02T23:31:22.001659+00:00

A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above.

 https://cve.radiocsirt.org/vuln/ghsa-4gg5-vx3j-xwc7 GHSA-4gg5-vx3j-xwc7 — Protobuf Java vulnerable to Uncontrolled Resource Consumption 2026-10-02T23:31:22.001698+00:00

Affected: Maven: com.google.protobuf:protobuf-java, Maven: com.google.protobuf:protobuf-javalite

A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above.

 https://cve.radiocsirt.org/vuln/gsd-2022-3510 gsd-2022-3510 2026-10-02T23:31:22.001750+00:00 gsd-2022-3510 https://cve.radiocsirt.org/vuln/msrc_cve-2022-3510 msrc_CVE-2022-3510 — Parsing issue in protobuf message-type extension 2026-10-02T23:31:22.001769+00:00 msrc_CVE-2022-3510 https://cve.radiocsirt.org/vuln/rhsa-2023:1855 RHSA-2023:1855 — Red Hat Security Advisory: Red Hat JBoss EAP 7.4.10 XP 4.0.0.GA security release 2026-10-02T23:31:22.001794+00:00

WildFly: possible information disclosure protobuf-java: Textformat parsing issue leads to DoS protobuf-java: Message-Type Extensions parsing issue leads to DoS

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3510 UBUNTU-CVE-2022-3510 2026-10-02T23:31:22.001824+00:00

Affected: Ubuntu:Pro:14.04:LTS: protobuf, Ubuntu:Pro:16.04:LTS: protobuf, Ubuntu:Pro:18.04:LTS: protobuf, Ubuntu:Pro:20.04:LTS: protobuf, Ubuntu:22.04:LTS: protobuf

A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0137 WID-SEC-W-2023-0137 — Oracle Communications: Mehrere Schwachstellen 2026-10-02T23:31:22.001920+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.