https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:08:19.038543+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0958 certfr-2026-avi-0958 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T04:08:19.047205+00:00 certfr-2026-avi-0958 https://cve.radiocsirt.org/vuln/euvd-2026-228023 EUVD-2026-228023 2026-10-03T04:08:19.047264+00:00 EUVD-2026-228023 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22899 fkie_cve-2023-22899 2026-10-03T04:08:19.047280+00:00

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive.

 https://cve.radiocsirt.org/vuln/ghsa-2pj2-gchf-wmw7 GHSA-2pj2-gchf-wmw7 — Zip4j Origin Validation Error 2026-10-03T04:08:19.047306+00:00

Affected: Maven: net.lingala.zip4j:zip4j

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive. This issue has been fixed in version 2.11.3.

 https://cve.radiocsirt.org/vuln/gsd-2023-22899 gsd-2023-22899 2026-10-03T04:08:19.047328+00:00 gsd-2023-22899 https://cve.radiocsirt.org/vuln/rhsa-2023:3814 RHSA-2023:3814 — Red Hat Security Advisory: Migration Toolkit for Runtimes security update 2026-10-03T04:08:19.047340+00:00

htmlUnit: Stack overflow crash causes Denial of Service (DoS) zip4j: does not always check the MAC when decrypting a ZIP archive

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-22899 UBUNTU-CVE-2023-22899 2026-10-03T04:08:19.047357+00:00

Affected: Ubuntu:20.04:LTS: zip4j, Ubuntu:22.04:LTS: zip4j, Ubuntu:24.04:LTS: zip4j, Ubuntu:25.10: zip4j, Ubuntu:26.04:LTS: zip4j

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1016 WID-SEC-W-2023-1016 — Oracle Fusion Middleware: Mehrere Schwachstellen 2026-10-03T04:08:19.047381+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.