https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:40:04.440978+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-07817 bdu:2024-07817 2026-10-03T15:40:04.716490+00:00 bdu:2024-07817 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0059 certfr-2025-avi-0059 — De multiples vulnérabilités ont été découvertes dans les produits Atlassian. Elles permettent à un attaquant de provoqu… 2026-10-03T15:40:04.716537+00:00 certfr-2025-avi-0059 https://cve.radiocsirt.org/vuln/cleanstart-2026-gz54612 Withdrawn: CLEANSTART-2026-GZ54612 — In Spring Security, versions 5 2026-10-03T15:40:04.716557+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-nifi

Multiple security vulnerabilities affect the apache-nifi package. In Spring Security, versions 5. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-196481 EUVD-2026-196481 2026-10-03T15:40:04.716588+00:00 EUVD-2026-196481 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47561 fkie_cve-2024-47561 2026-10-03T15:40:04.716601+00:00

Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.

 https://cve.radiocsirt.org/vuln/ghsa-r7pg-v2c8-mfg3 GHSA-r7pg-v2c8-mfg3 — Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK) 2026-10-03T15:40:04.716623+00:00

Affected: Maven: org.apache.avro:avro

Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0258 NCSC-2026-0258 — Kwetsbaarheden verholpen in Oracle Financial Services 2026-10-03T15:40:04.716643+00:00 NCSC-2026-0258 https://cve.radiocsirt.org/vuln/oesa-2024-2227 OESA-2024-2227 — avro security update 2026-10-03T15:40:04.716686+00:00

Affected: openEuler:22.03-LTS-SP4: avro, openEuler:22.03-LTS-SP3: avro, openEuler:20.03-LTS-SP4: avro, openEuler:22.03-LTS-SP1: avro, openEuler:24.03-LTS: avro

Apache Avro is a data serialization system. Security Fix(es): Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.(CVE-2024-47561)

 https://cve.radiocsirt.org/vuln/rhsa-2024:10207 RHSA-2024:10207 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.11 Security update 2026-10-03T15:40:04.716713+00:00

undertow: client side invocation timeout raised when calling over HTTP2 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender h2: Loading of custom classes from remote servers through JNDI log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender log4j: Unsafe deserialization flaw in Chainsaw log viewer OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) hsqldb: Untrusted input may lead to RCE attack CXF: SSRF Vulnerability eap-7: heap exhaustion via deserialization xnio: StackOverflowException when the chain of notifier states becomes problematically big log4j1-socketappender: DoS via hashmap logging apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding apache-avro: Schema parsing may trigger Remote Code Execution (RCE)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3111 WID-SEC-W-2024-3111 — Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Codeausführung 2026-10-03T15:40:04.716754+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen.