https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:27:51.548151+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07271 bdu:2023-07271 2026-10-04T20:27:51.553624+00:00 bdu:2023-07271 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0090 certfr-2024-avi-0090 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-04T20:27:51.553657+00:00 certfr-2024-avi-0090 https://cve.radiocsirt.org/vuln/cnvd-2023-70275 cnvd-2023-70275 2026-10-04T20:27:51.553676+00:00 cnvd-2023-70275 https://cve.radiocsirt.org/vuln/euvd-2026-216778 EUVD-2026-216778 2026-10-04T20:27:51.553689+00:00 EUVD-2026-216778 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40743 fkie_cve-2023-40743 2026-10-04T20:27:51.553699+00:00

** UNSUPPORTED WHEN ASSIGNED ** When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose the application to DoS, SSRF and even attacks leading to RCE.

As Axis 1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis 2/Java. As a workaround, you may review your code to verify no untrusted or unsanitized input is passed to "ServiceFactory.getService", or by applying the patch from https://github.com/apache/axis-axis1-java/commit/7e66753427466590d6def0125e448d2791723210 . The Apache Axis project does not expect to create an Axis 1.x release fixing this problem, though contributors that would like to work towards this are welcome.

 https://cve.radiocsirt.org/vuln/ghsa-rmqp-9w4c-gc7w GHSA-rmqp-9w4c-gc7w — Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService 2026-10-04T20:27:51.553733+00:00

Affected: Maven: org.apache.axis:axis, Maven: axis:axis

When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose the application to DoS, SSRF and even attacks leading to RCE.

As Axis 1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis 2/Java. As a workaround, you may review your code to verify no untrusted or unsanitized input is passed to "ServiceFactory.getService", or by applying the patch from https://github.com/apache/axis-axis1-java/commit/7e66753427466590d6def0125e448d2791723210 . The Apache Axis project does not expect to create an Axis 1.x release fixing this problem, though contributors that would like to work towards this are welcome.

 https://cve.radiocsirt.org/vuln/gsd-2023-40743 gsd-2023-40743 2026-10-04T20:27:51.553763+00:00 gsd-2023-40743 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-40743 UBUNTU-CVE-2023-40743 2026-10-04T20:27:51.553775+00:00

Affected: Ubuntu:Pro:16.04:LTS: axis, Ubuntu:Pro:18.04:LTS: axis, Ubuntu:20.04:LTS: axis, Ubuntu:22.04:LTS: axis

** UNSUPPORTED WHEN ASSIGNED ** When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose the application to DoS, SSRF and even attacks leading to RCE. As Axis 1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis 2/Java. As a workaround, you may review your code to verify no untrusted or unsanitized input is passed to "ServiceFactory.getService", or by applying the patch from https://github.com/apache/axis-axis1-java/commit/7e66753427466590d6def0125e448d2791723210 . The Apache Axis project does not expect to create an Axis 1.x release fixing this problem, though contributors that would like to work towards this are welcome.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0543 WID-SEC-W-2024-0543 — IBM WebSphere Service Registry and Repository: Mehrere Schwachstellen 2026-10-04T20:27:51.553802+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in IBM WebSphere Service Registry and Repository ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.