https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:12:15.918826+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-08601 bdu:2025-08601 2026-10-02T22:12:16.166641+00:00 bdu:2025-08601 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0746 certfr-2025-avi-0746 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T22:12:16.166694+00:00 certfr-2025-avi-0746 https://cve.radiocsirt.org/vuln/cleanstart-2026-cu18187 Withdrawn: CLEANSTART-2026-CU18187 — Security fixes in stargate 1.0.90-r4 2026-10-02T22:12:16.166723+00:00

Withdrawn by the publisher.

Affected: CleanStart: stargate

Package stargate version 1.0.90-r4 fixes 87 vulnerabilities: ghsa-76h9-2vwh-w278, ghsa-pqr6-cmr2-h8hf, ghsa-fjpj-2g6w-x25r, ghsa-qcwq-55hx-v3vh, ghsa-55g7-9cwv-5qfv...

 https://cve.radiocsirt.org/vuln/euvd-2026-238520 EUVD-2026-238520 2026-10-02T22:12:16.166771+00:00 EUVD-2026-238520 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13009 fkie_cve-2024-13009 2026-10-02T22:12:16.166798+00:00

In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result in corrupted and/or inadvertent sharing of data between requests.

 https://cve.radiocsirt.org/vuln/ghsa-q4rv-gq96-w7c5 GHSA-q4rv-gq96-w7c5 — **UNSUPPORTED WHEN ASSIGNED** GzipHandler causes part of request body to be seen as request body of a separate request 2026-10-02T22:12:16.166841+00:00

Affected: Maven: org.eclipse.jetty:jetty-server

In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result in corrupted and/or inadvertent sharing of data between requests.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0026 NCSC-2026-0026 — Kwetsbaarheden verholpen in Oracle Enterprise Manager 2026-10-02T22:12:16.166877+00:00 NCSC-2026-0026 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15160-1 openSUSE-SU-2025:15160-1 — jetty-annotations-9.4.57-1.1 on GA media 2026-10-02T22:12:16.166912+00:00

jetty-annotations-9.4.57-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:12511 RHSA-2025:12511 — Red Hat Security Advisory: Streams for Apache Kafka 3.0.0 release and security update 2026-10-02T22:12:16.166944+00:00

json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority jetty-server: Jetty: Gzip Request Body Buffer Corruption kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider netty: Denial of Service attack on windows app using Netty kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine netty: Denial of Service attack on windows app using Netty commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang io.quarkus/quarkus-vertx: Quarkus potential data leak com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-13009 UBUNTU-CVE-2024-13009 2026-10-02T22:12:16.167007+00:00

Affected: Ubuntu:18.04:LTS: jetty9, Ubuntu:20.04:LTS: jetty9, Ubuntu:22.04:LTS: jetty9, Ubuntu:24.04:LTS: jetty9

In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result in corrupted and/or inadvertent sharing of data between requests.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0987 WID-SEC-W-2025-0987 — Eclipse Jetty: Mehrere Schwachstellen 2026-10-02T22:12:16.167046+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Eclipse Jetty ausnutzen, um Daten zu manipulieren oder einen Denial-of-Service auszulösen.