https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:06:36.110469+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01536 bdu:2024-01536 2026-10-02T15:06:36.126659+00:00 bdu:2024-01536 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0154 certfr-2025-avi-0154 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T15:06:36.126758+00:00 certfr-2025-avi-0154 https://cve.radiocsirt.org/vuln/euvd-2026-12719 EUVD-2026-12719 2026-10-02T15:06:36.126789+00:00 EUVD-2026-12719 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4244 fkie_cve-2022-4244 2026-10-02T15:06:36.126818+00:00

A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.

 https://cve.radiocsirt.org/vuln/ghsa-g6ph-x5wf-g337 GHSA-g6ph-x5wf-g337 — plexus-codehaus vulnerable to directory traversal 2026-10-02T15:06:36.126883+00:00

Affected: Maven: org.codehaus.plexus:plexus-utils

A flaw was found in plexus-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with dot-dot-slash (`../`) sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.

 https://cve.radiocsirt.org/vuln/gsd-2022-4244 gsd-2022-4244 2026-10-02T15:06:36.126913+00:00 gsd-2022-4244 https://cve.radiocsirt.org/vuln/rhsa-2023:2135 RHSA-2023:2135 — Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.3 security update 2026-10-02T15:06:36.126924+00:00

keycloak: path traversal via double URL encoding codehaus-plexus: Directory Traversal codehaus-plexus: XML External Entity (XXE) Injection jettison: parser crash by stackoverflow jettison: memory exhaustion via user-supplied XML or JSON data jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays apache-commons-text: variable interpolation RCE jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos CXF: directory listing / code exfiltration CXF: SSRF Vulnerability Undertow: Infinite loop in SslConduit during close

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4244 UBUNTU-CVE-2022-4244 2026-10-02T15:06:36.126973+00:00

Affected: Ubuntu:14.04:LTS: plexus-utils2, Ubuntu:16.04:LTS: plexus-utils2, Ubuntu:18.04:LTS: plexus-utils2

A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0094 WID-SEC-W-2024-0094 — Atlassian Bamboo: Mehrere Schwachstellen 2026-10-02T15:06:36.126997+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Atlassian Bamboo ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Request Smuggling-Angriff durchzuführen.