https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:20:37.544115+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-06619 bdu:2025-06619 2026-10-03T22:20:37.707959+00:00 bdu:2025-06619 https://cve.radiocsirt.org/vuln/euvd-2026-194280 EUVD-2026-194280 2026-10-03T22:20:37.708007+00:00 EUVD-2026-194280 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28168 fkie_cve-2024-28168 2026-10-03T22:20:37.708030+00:00

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP.

This issue affects Apache XML Graphics FOP: 2.9.

Users are recommended to upgrade to version 2.10, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-jqfv-jrvq-95jm GHSA-jqfv-jrvq-95jm — Apache XML Graphics FOP XML External Entity Reference ('XXE') vulnerability 2026-10-03T22:20:37.708078+00:00

Affected: Maven: org.apache.xmlgraphics:fop-core

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP.

This issue affects Apache XML Graphics FOP: 2.9.

Users are recommended to upgrade to version 2.10, which fixes the issue.

 https://cve.radiocsirt.org/vuln/gsd-2024-28168 gsd-2024-28168 2026-10-03T22:20:37.708118+00:00 gsd-2024-28168 https://cve.radiocsirt.org/vuln/oesa-2024-2243 OESA-2024-2243 — fop security update 2026-10-03T22:20:37.708138+00:00

Affected: openEuler:20.03-LTS-SP4: fop, openEuler:22.03-LTS-SP1: fop, openEuler:24.03-LTS: fop, openEuler:22.03-LTS-SP4: fop, openEuler:22.03-LTS-SP3: fop

FOP (Formatting Objects Processor) is a print formatter driven by XSL formatting objects (XSL-FO) and an output independent formatter. It is a Java application that reads a formatting object (FO) tree and renders the resulting pages to a specified output. Output formats currently supported include PDF, PS, PCL, AFP, XML (area tree representation), Print, AWT and PNG, and to a lesser extent, RTF and TXT. The primary output target is PDF. Security Fix(es): Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue.(CVE-2024-28168)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14398-1 openSUSE-SU-2024:14398-1 — xmlgraphics-fop-2.10-1.1 on GA media 2026-10-03T22:20:37.708191+00:00

xmlgraphics-fop-2.10-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-28168 UBUNTU-CVE-2024-28168 2026-10-03T22:20:37.708222+00:00

Affected: Ubuntu:16.04:LTS: fop, Ubuntu:18.04:LTS: fop, Ubuntu:20.04:LTS: fop, Ubuntu:22.04:LTS: fop, Ubuntu:24.04:LTS: fop, Ubuntu:25.10: fop, Ubuntu:26.04:LTS: fop

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0299 WID-SEC-W-2025-0299 — IBM Business Automation Workflow: Mehrere Schwachstellen 2026-10-03T22:20:37.708268+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service herbeizuführen oder um ein Cross-Site-Scritping auszuführen.