https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:21:17.405385+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0034 certfr-2023-avi-0034 — De multiples vulnérabilités ont été découvertes dans les produits Oracle. Certaines d'entre elles permettent à un attaq… 2026-10-03T01:21:17.495260+00:00 certfr-2023-avi-0034 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40153 fkie_cve-2022-40153 2026-10-03T01:21:17.495305+00:00

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.

 https://cve.radiocsirt.org/vuln/ghsa-fv22-xp26-mm9w Withdrawn: GHSA-fv22-xp26-mm9w — Denial of Service due to parser crash 2026-10-03T01:21:17.495336+00:00

Withdrawn by the publisher.

Affected: Maven: com.fasterxml.woodstox:woodstox-core

## Withdrawn

This advisory has been withdrawn because it has been found to be a duplicate. Please see the issue [here](https://github.com/x-stream/xstream/issues/304#issuecomment-1293654236) for more information.

## Original Despcription

Those using FasterXML/woodstox to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.

This vulnerability is only relevant for users making use of the DTD parsing functionality.

 https://cve.radiocsirt.org/vuln/gsd-2022-40153 gsd-2022-40153 2026-10-03T01:21:17.495368+00:00 gsd-2022-40153 https://cve.radiocsirt.org/vuln/rhsa-2023:0469 RHSA-2023:0469 — Red Hat Security Advisory: Red Hat Integration Camel Extensions For Quarkus 2.13.2 2026-10-03T01:21:17.495381+00:00

jettison: parser crash by stackoverflow jettison: memory exhaustion via user-supplied XML or JSON data xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays apache-commons-text: variable interpolation RCE

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-40153 Withdrawn: UBUNTU-CVE-2022-40153 2026-10-03T01:21:17.495412+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:16.04:LTS: libxstream-java

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2264 WID-SEC-W-2022-2264 — SOS GmbH JobScheduler: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-03T01:21:17.495431+00:00

Ein Angreifer kann mehrere Schwachstellen in SOS GmbH JobScheduler ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.