https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:57:12.927408+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-05234 bdu:2023-05234 2026-10-02T14:57:12.952200+00:00 bdu:2023-05234 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0040 certfr-2024-avi-0040 — De multiples vulnérabilités ont été découvertes dans Atlassian Confluence et Jira. Certaines d'entre elles permettent à… 2026-10-02T14:57:12.952240+00:00 certfr-2024-avi-0040 https://cve.radiocsirt.org/vuln/cleanstart-2026-fv79231 Withdrawn: CLEANSTART-2026-FV79231 — Netty is a network application framework for development of protocol servers and clients 2026-10-02T14:57:12.952259+00:00

Withdrawn by the publisher.

Affected: CleanStart: s3proxy

Multiple security vulnerabilities affect the s3proxy package. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-196996 EUVD-2026-196996 2026-10-02T14:57:12.952290+00:00 EUVD-2026-196996 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3635 fkie_cve-2023-3635 2026-10-02T14:57:12.952314+00:00

GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.

 https://cve.radiocsirt.org/vuln/ghsa-w33c-445m-f8w7 GHSA-w33c-445m-f8w7 — Okio Signed to Unsigned Conversion Error vulnerability 2026-10-02T14:57:12.952335+00:00

Affected: Maven: com.squareup.okio:okio, Maven: com.squareup.okio:okio-jvm

GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.

 https://cve.radiocsirt.org/vuln/gsd-2023-3635 gsd-2023-3635 2026-10-02T14:57:12.952358+00:00 gsd-2023-3635 https://cve.radiocsirt.org/vuln/jvndb-2026-010300 jvndb-2026-010300 2026-10-02T14:57:12.952369+00:00

Hitachi Ops Center Viewpoint contain the following vulnerabilities: CVE-2014-3643, CVE-2023-3635, CVE-2023-6378, CVE-2023-6481, CVE-2023-35116, CVE-2024-12798, CVE-2024-12801, CVE-2024-47554

 https://cve.radiocsirt.org/vuln/rhsa-2023:5165 RHSA-2023:5165 — Red Hat Security Advisory: Red Hat AMQ Streams 2.5.0 release and security update 2026-10-02T14:57:12.952385+00:00

netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way SnakeYaml: Constructor Deserialization Remote Code Execution netty: world readable temporary file containing sensitive data scala: deserialization gadget chain RESTEasy: creation of insecure temp files guava: insecure temporary directory creation okio: GzipSource class improper exception handling jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies bouncycastle: potential blind LDAP injection attack using a self-signed certificate snappy-java: Integer overflow in shuffle leads to DoS snappy-java: Integer overflow in compress leads to DoS snappy-java: Unchecked chunk length leads to DoS netty: SniHandler 16MB allocation leads to OOM

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-3635 UBUNTU-CVE-2023-3635 2026-10-02T14:57:12.952424+00:00

Affected: Ubuntu:18.04:LTS: okio, Ubuntu:20.04:LTS: okio, Ubuntu:22.04:LTS: okio, Ubuntu:24.04:LTS: okio, Ubuntu:25.10: okio, Ubuntu:26.04:LTS: okio

GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2679 WID-SEC-W-2023-2679 — Oracle Communications: Mehrere Schwachstellen 2026-10-02T14:57:12.952451+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.