https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:17:17.689076+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-08290 bdu:2024-08290 2026-10-04T06:17:17.693371+00:00 bdu:2024-08290 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0624 certfr-2024-avi-0624 — Une vulnérabilité a été découverte dans Spring Cloud Skipper. Elle permet à un attaquant de provoquer une exécution de… 2026-10-04T06:17:17.693403+00:00 certfr-2024-avi-0624 https://cve.radiocsirt.org/vuln/euvd-2026-5800 EUVD-2026-5800 2026-10-04T06:17:17.693432+00:00 EUVD-2026-5800 https://cve.radiocsirt.org/vuln/fkie_cve-2024-37084 fkie_cve-2024-37084 2026-10-04T06:17:17.693445+00:00

In Spring Cloud Data Flow versions prior to 2.11.4,  a malicious user who has access to the Skipper server api can use a crafted upload request to write an arbitrary file to any location on the file system which could lead to compromising the server

 https://cve.radiocsirt.org/vuln/ghsa-p528-3mvf-gr87 GHSA-p528-3mvf-gr87 — Remote code execution in Spring Cloud Data Flow 2026-10-04T06:17:17.693473+00:00

Affected: Maven: org.springframework.cloud:spring-cloud-skipper

In Spring Cloud Data Flow versions prior to 2.11.4, a malicious user who has access to the Skipper server api can use a crafted upload request to write an arbitrary file to any location on the file system which could lead to compromising the server

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1705 WID-SEC-W-2024-1705 — VMware Tanzu Spring Cloud: Schwachstelle ermöglicht Codeausführung 2026-10-04T06:17:17.693496+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in VMware Tanzu Spring Cloud ausnutzen, um beliebigen Programmcode auszuführen.