https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:00:13.293484+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0512 certfr-2025-avi-0512 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T22:00:13.365630+00:00 certfr-2025-avi-0512 https://cve.radiocsirt.org/vuln/euvd-2026-212460 EUVD-2026-212460 2026-10-03T22:00:13.365672+00:00 EUVD-2026-212460 https://cve.radiocsirt.org/vuln/fkie_cve-2024-57965 fkie_cve-2024-57965 2026-10-03T22:00:13.365687+00:00

In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted setAttribute('href',href) call. NOTE: some parties feel that the code change only addresses a warning message from a SAST tool and does not fix a vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-fh7x-2848-jmpf GHSA-fh7x-2848-jmpf 2026-10-03T22:00:13.365716+00:00

In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted setAttribute('href',href) call. NOTE: some parties feel that the code change only addresses a warning message from a SAST tool and does not fix a vulnerability.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-57965 UBUNTU-CVE-2024-57965 2026-10-03T22:00:13.365733+00:00

Affected: Ubuntu:Pro:20.04:LTS: node-axios, Ubuntu:Pro:22.04:LTS: node-axios, Ubuntu:Pro:24.04:LTS: node-axios

In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted setAttribute('href',href) call. NOTE: some parties feel that the code change only addresses a warning message from a SAST tool and does not fix a vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0580 WID-SEC-W-2025-0580 — IBM License Metric Tool: Mehrere Schwachstellen 2026-10-03T22:00:13.365758+00:00

Ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen im IBM License Metric Tool ausnutzen, um Daten (Protokolldateien) zu manipulieren, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder SSRF-Angriffe durchzuführen.