https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:37:48.168337+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08076 bdu:2023-08076 2026-10-03T01:37:48.340892+00:00 bdu:2023-08076 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0950 certfr-2023-avi-0950 — De multiples vulnérabilités ont été découvertes dans <span class="textit">Juniper Secure Analytics</span>. Certaines d'… 2026-10-03T01:37:48.340929+00:00 certfr-2023-avi-0950 https://cve.radiocsirt.org/vuln/euvd-2026-216071 EUVD-2026-216071 2026-10-03T01:37:48.340948+00:00 EUVD-2026-216071 https://cve.radiocsirt.org/vuln/fkie_cve-2022-44730 fkie_cve-2022-44730 2026-10-03T01:37:48.340960+00:00

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.

A malicious SVG can probe user profile / data and send it directly as parameter to a URL.

 https://cve.radiocsirt.org/vuln/ghsa-2474-2566-3qxp GHSA-2474-2566-3qxp — Apache Batik information disclosure vulnerability 2026-10-03T01:37:48.340988+00:00

Affected: Maven: org.apache.xmlgraphics:batik-script

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16.

A malicious SVG can probe user profile / data and send it directly as parameter to a URL.

 https://cve.radiocsirt.org/vuln/gsd-2022-44730 gsd-2022-44730 2026-10-03T01:37:48.341012+00:00 gsd-2022-44730 https://cve.radiocsirt.org/vuln/oesa-2023-1651 OESA-2023-1651 — batik security update 2026-10-03T01:37:48.341023+00:00

Affected: openEuler:20.03-LTS-SP1: batik, openEuler:20.03-LTS-SP3: batik, openEuler:22.03-LTS: batik, openEuler:22.03-LTS-SP1: batik, openEuler:22.03-LTS-SP2: batik

Batik is an inline templating engine for CoffeeScript, inspired by CoffeeKup, that lets you write your template directly as a CoffeeScript function. Security Fix(es): Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.(CVE-2022-38398) Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.(CVE-2022-38648) Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.(CVE-2022-40146) Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later. (CVE-2022-44729) Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL. (CVE-2022-44730)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13743-1 openSUSE-SU-2024:13743-1 — xmlgraphics-batik-1.17-1.1 on GA media 2026-10-03T01:37:48.341056+00:00

xmlgraphics-batik-1.17-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:5441 RHSA-2023:5441 — Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 4.0.0 release and security update 2026-10-03T01:37:48.341083+00:00

batik: Server-Side Request Forgery vulnerability batik: Server-Side Request Forgery vulnerability apache-ivy: XML External Entity vulnerability jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies apache-johnzon: Prevent inefficient internal conversion from BigDecimal at large scale netty: SniHandler 16MB allocation leads to OOM jetty: Improper validation of HTTP/1 content-length

 https://cve.radiocsirt.org/vuln/suse-su-2024:0777-1 SUSE-SU-2024:0777-1 — Security update for xmlgraphics-batik 2026-10-03T01:37:48.341119+00:00

Security update for xmlgraphics-batik

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-44730 UBUNTU-CVE-2022-44730 2026-10-03T01:37:48.341147+00:00

Affected: Ubuntu:Pro:16.04:LTS: batik, Ubuntu:18.04:LTS: batik, Ubuntu:20.04:LTS: batik, Ubuntu:22.04:LTS: batik, Ubuntu:24.04:LTS: batik, Ubuntu:25.10: batik, Ubuntu:26.04:LTS: batik

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0088 WID-SEC-W-2024-0088 — IBM Maximo Asset Management: Mehrere Schwachstellen 2026-10-03T01:37:48.341175+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM Maximo Asset Management ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder beliebigen Programmcode auszuführen.