https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:57:06.133985+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07354 bdu:2023-07354 2026-10-04T23:57:06.650784+00:00 bdu:2023-07354 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0047 certfr-2024-avi-0047 — De multiples vulnérabilités ont été découvertes dans Oracle PeopleSoft. Elles permettent à un attaquant de provoquer un… 2026-10-04T23:57:06.650829+00:00 certfr-2024-avi-0047 https://cve.radiocsirt.org/vuln/euvd-2026-258472 EUVD-2026-258472 2026-10-04T23:57:06.650849+00:00 EUVD-2026-258472 https://cve.radiocsirt.org/vuln/fkie_cve-2023-44483 fkie_cve-2023-44483 2026-10-04T23:57:06.650862+00:00

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-xfrj-6vvc-3xm2 GHSA-xfrj-6vvc-3xm2 — Apache Santuario - XML Security for Java are vulnerable to private key disclosure 2026-10-04T23:57:06.650894+00:00

Affected: Maven: org.apache.santuario:xmlsec

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-44483 gsd-2023-44483 2026-10-04T23:57:06.650922+00:00 gsd-2023-44483 https://cve.radiocsirt.org/vuln/oesa-2025-2380 OESA-2025-2380 — xml-security security update 2026-10-04T23:57:06.650933+00:00

Affected: openEuler:22.03-LTS-SP4: xml-security

The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing. Security Fix(es):

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.(CVE-2023-44483)

 https://cve.radiocsirt.org/vuln/rhsa-2024:0710 RHSA-2024:0710 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.15 Security update 2026-10-04T23:57:06.650958+00:00

jgit: arbitrary file overwrite santuario: Private Key disclosure in debug-log output

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-44483 UBUNTU-CVE-2023-44483 2026-10-04T23:57:06.650978+00:00

Affected: Ubuntu:16.04:LTS: libxml-security-java, Ubuntu:18.04:LTS: libxml-security-java, Ubuntu:20.04:LTS: libxml-security-java, Ubuntu:22.04:LTS: libxml-security-java, Ubuntu:24.04:LTS: libxml-security-java, Ubuntu:25.10: libxml-security-java, Ubuntu:26.04:LTS: libxml-security-java

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2943 WID-SEC-W-2023-2943 — IBM WebSphere Application Server Liberty: Mehrere Schwachstellen ermöglichen die Offenlegung von Informationen 2026-10-04T23:57:06.651009+00:00

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty ausnutzen, um Informationen offenzulegen.