https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:00:56.492192+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-03176 bdu:2023-03176 2026-10-03T08:00:56.592565+00:00 bdu:2023-03176 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0630 certfr-2024-avi-0630 — De multiples vulnérabilités ont été découvertes dans IBM QRadar. Certaines d'entre elles permettent à un attaquant de p… 2026-10-03T08:00:56.592597+00:00 certfr-2024-avi-0630 https://cve.radiocsirt.org/vuln/euvd-2026-262477 EUVD-2026-262477 2026-10-03T08:00:56.592615+00:00 EUVD-2026-262477 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0842 fkie_cve-2023-0842 2026-10-03T08:00:56.592627+00:00

xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the __proto__ property to be edited.

 https://cve.radiocsirt.org/vuln/ghsa-776f-qx25-q3cc GHSA-776f-qx25-q3cc — xml2js is vulnerable to prototype pollution 2026-10-03T08:00:56.592653+00:00

Affected: npm: xml2js

xml2js versions before 0.5.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the `__proto__` property to be edited.

 https://cve.radiocsirt.org/vuln/gsd-2023-0842 gsd-2023-0842 2026-10-03T08:00:56.592675+00:00 gsd-2023-0842 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-0842 UBUNTU-CVE-2023-0842 2026-10-03T08:00:56.592687+00:00

Affected: Ubuntu:16.04:LTS: node-xml2js, Ubuntu:18.04:LTS: node-xml2js, Ubuntu:20.04:LTS: node-xml2js, Ubuntu:22.04:LTS: node-xml2js, Ubuntu:24.04:LTS: node-xml2js, Ubuntu:25.10: node-xml2js, Ubuntu:26.04:LTS: node-xml2js

xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the __proto__ property to be edited.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 WID-SEC-W-2026-0180 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-03T08:00:56.592713+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.