<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T20:14:11.997221+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2025-03306</id>
    <title>bdu:2025-03306</title>
    <updated>2026-10-03T20:14:12.378838+00:00</updated>
    <content>bdu:2025-03306</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2025-03306"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2024-avi-1081</id>
    <title>certfr-2024-avi-1081 — De multiples vulnérabilités ont été découvertes dans les produits IBM.Certaines d'entre elles permettent à un attaquant…</title>
    <updated>2026-10-03T20:14:12.378960+00:00</updated>
    <content>certfr-2024-avi-1081</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2024-avi-1081"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cleanstart-2026-cu18187</id>
    <title>Withdrawn: CLEANSTART-2026-CU18187 — Security fixes in stargate 1.0.90-r4</title>
    <updated>2026-10-03T20:14:12.379000+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Withdrawn by the publisher.</strong></p>
<p><strong>Affected:</strong> CleanStart: stargate</p>
<p>Package stargate version 1.0.90-r4 fixes 87 vulnerabilities: ghsa-76h9-2vwh-w278, ghsa-pqr6-cmr2-h8hf, ghsa-fjpj-2g6w-x25r, ghsa-qcwq-55hx-v3vh, ghsa-55g7-9cwv-5qfv...</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/cleanstart-2026-cu18187"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-212956</id>
    <title>EUVD-2026-212956</title>
    <updated>2026-10-03T20:14:12.379062+00:00</updated>
    <content>EUVD-2026-212956</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-212956"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2024-47554</id>
    <title>fkie_cve-2024-47554</title>
    <updated>2026-10-03T20:14:12.379086+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p>Uncontrolled Resource Consumption vulnerability in Apache Commons IO.</p>
<p>The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.</p>
<p>This issue affects Apache Commons IO: from 2.0 before 2.14.0.</p>
<p>Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2024-47554"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-78wr-2p64-hpwj</id>
    <title>GHSA-78wr-2p64-hpwj — Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader</title>
    <updated>2026-10-03T20:14:12.379138+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Maven: commons-io:commons-io</p>
<p>Uncontrolled Resource Consumption vulnerability in Apache Commons IO.</p>
<p>The `org.apache.commons.io.input.XmlStreamReader` class may excessively consume CPU resources when processing maliciously crafted input.</p>
<p>This issue affects Apache Commons IO: from 2.0 before 2.14.0.</p>
<p>Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-78wr-2p64-hpwj"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/jvndb-2026-010300</id>
    <title>jvndb-2026-010300</title>
    <updated>2026-10-03T20:14:12.379190+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Hitachi Ops Center Viewpoint contain the following vulnerabilities:

CVE-2014-3643, CVE-2023-3635, CVE-2023-6378, CVE-2023-6481, CVE-2023-35116, CVE-2024-12798, CVE-2024-12801, CVE-2024-47554</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/jvndb-2026-010300"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/msrc_cve-2024-47554</id>
    <title>msrc_CVE-2024-47554 — Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader</title>
    <updated>2026-10-03T20:14:12.379232+00:00</updated>
    <content>msrc_CVE-2024-47554</content>
    <link href="https://cve.radiocsirt.org/vuln/msrc_cve-2024-47554"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ncsc-2026-0027</id>
    <title>NCSC-2026-0027 — Kwetsbaarheden verholpen in Oracle Fusion Middleware</title>
    <updated>2026-10-03T20:14:12.379268+00:00</updated>
    <content>NCSC-2026-0027</content>
    <link href="https://cve.radiocsirt.org/vuln/ncsc-2026-0027"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2024-2558</id>
    <title>OESA-2024-2558 — apache-commons-io security update</title>
    <updated>2026-10-03T20:14:12.379440+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:24.03-LTS: apache-commons-io</p>
<p>Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.

Security Fix(es):

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.  The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.   This issue affects Apache Commons IO: from 2.0 before 2.14.0.  Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.(CVE-2024-47554)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2024-2558"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2024:14387-1</id>
    <title>openSUSE-SU-2024:14387-1 — apache-commons-io-2.17.0-2.1 on GA media</title>
    <updated>2026-10-03T20:14:12.379486+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>apache-commons-io-2.17.0-2.1 on GA media</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2024:14387-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhsa-2024:8823</id>
    <title>RHSA-2024:8823 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.4 Security update</title>
    <updated>2026-10-03T20:14:12.379522+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) nimbus-jose-jwt: large JWE p2c header value causes Denial of Service wildfly: No timeout for EAP management interface may lead to Denial of Service (DoS) keycloak-saml-core: Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak Keycloak: Vulnerable Redirect URI Validation Results in Open Redirec apache: cxf: org.apache.cxf:cxf-rt-transports-http: unrestricted memory consumption in CXF HTTP clients apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhsa-2024:8823"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2024:3596-1</id>
    <title>SUSE-SU-2024:3596-1 — Security update for apache-commons-io</title>
    <updated>2026-10-03T20:14:12.379586+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for apache-commons-io</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2024:3596-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-47554</id>
    <title>UBUNTU-CVE-2024-47554</title>
    <updated>2026-10-03T20:14:12.379620+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: commons-io, Ubuntu:Pro:16.04:LTS: commons-io, Ubuntu:Pro:18.04:LTS: commons-io, Ubuntu:Pro:20.04:LTS: commons-io, Ubuntu:Pro:22.04:LTS: commons-io, Ubuntu:Pro:24.04:LTS: commons-io</p>
<p>Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-47554"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3082</id>
    <title>WID-SEC-W-2024-3082 — Apache Commons IO: Schwachstelle ermöglicht Denial of Service</title>
    <updated>2026-10-03T20:14:12.379685+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Commons IO ausnutzen, um einen Denial of Service Angriff durchzuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3082"/>
  </entry>
</feed>
