https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:45:45.920117+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-08726 bdu:2024-08726 2026-10-03T21:45:46.104583+00:00 bdu:2024-08726 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0900 certfr-2024-avi-0900 — De multiples vulnérabilités ont été découvertes dans Spring Framework. Elles permettent à un attaquant de provoquer une… 2026-10-03T21:45:46.104647+00:00 certfr-2024-avi-0900 https://cve.radiocsirt.org/vuln/cleanstart-2026-hw70472 Withdrawn: CLEANSTART-2026-HW70472 — Security fixes in activemq 5.19.8-r3 2026-10-03T21:45:46.104667+00:00

Withdrawn by the publisher.

Affected: CleanStart: activemq

Package activemq version 5.19.8-r3 fixes 29 vulnerabilities: CVE-2016-1000027, CVE-2024-38816, CVE-2024-38819, CVE-2024-38820, CVE-2024-38827...

 https://cve.radiocsirt.org/vuln/euvd-2026-209953 EUVD-2026-209953 2026-10-03T21:45:46.104702+00:00 EUVD-2026-209953 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38819 fkie_cve-2024-38819 2026-10-03T21:45:46.104715+00:00

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.

 https://cve.radiocsirt.org/vuln/ghsa-g5vr-rgqm-vf78 GHSA-g5vr-rgqm-vf78 — Spring Framework Path Traversal vulnerability 2026-10-03T21:45:46.104737+00:00

Affected: Maven: org.springframework:spring-webflux, Maven: org.springframework:spring-webmvc

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.

 https://cve.radiocsirt.org/vuln/rhsa-2024:10700 RHSA-2024:10700 — Red Hat Security Advisory: Red Hat Build of Apache Camel 4.8 for Spring Boot security update. 2026-10-03T21:45:46.104763+00:00

protobuf: StackOverflow vulnerability in Protocol Buffers kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38819 UBUNTU-CVE-2024-38819 2026-10-03T21:45:46.104804+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3237 WID-SEC-W-2024-3237 — VMware Tanzu Spring Framework: Mehrere Schwachstellen 2026-10-03T21:45:46.104863+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Framework ausnutzen, um Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.