https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:34:55.045445+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-03454 bdu:2025-03454 2026-10-02T15:34:55.205503+00:00 bdu:2025-03454 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0210 certfr-2025-avi-0210 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq… 2026-10-02T15:34:55.205543+00:00 certfr-2025-avi-0210 https://cve.radiocsirt.org/vuln/cleanstart-2026-ac10054 CLEANSTART-2026-AC10054 — Security fix for CVE-2024-8184 applied in: apache-hive 4.0.0-r1, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips… 2026-10-02T15:34:55.205563+00:00

Affected: CleanStart: apache-hive, CleanStart: cassandra-reaper-fips, CleanStart: solr, CleanStart: stargate

CVE-2024-8184 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-257779 EUVD-2026-257779 2026-10-02T15:34:55.205599+00:00 EUVD-2026-257779 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8184 fkie_cve-2024-8184 2026-10-02T15:34:55.205611+00:00

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory.

 https://cve.radiocsirt.org/vuln/ghsa-g8m5-722r-8whq GHSA-g8m5-722r-8whq — Eclipse Jetty's ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks 2026-10-02T15:34:55.205634+00:00

Affected: Maven: org.eclipse.jetty:jetty-server

### Impact Remote DOS attack can cause out of memory

### Description There exists a security vulnerability in Jetty's `ThreadLimitHandler.getRemote()` which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory.

### Affected Versions

* Jetty 12.0.0-12.0.8 (Supported) * Jetty 11.0.0-11.0.23 (EOL) * Jetty 10.0.0-10.0.23 (EOL) * Jetty 9.3.12-9.4.55 (EOL)

### Patched Versions

* Jetty 12.0.9 * Jetty 11.0.24 * Jetty 10.0.24 * Jetty 9.4.56

### Workarounds

Do not use `ThreadLimitHandler`. Consider use of `QoSHandler` instead to artificially limit resource utilization.

### References

Jetty 12 - https://github.com/jetty/jetty.project/pull/11723

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14408-1 openSUSE-SU-2024:14408-1 — jetty-annotations-9.4.56-2.1 on GA media 2026-10-02T15:34:55.205668+00:00

jetty-annotations-9.4.56-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:11023 RHSA-2024:11023 — Red Hat Security Advisory: HawtIO 4.1.0 for Red Hat build of Apache Camel 4 Release and security update. 2026-10-02T15:34:55.205686+00:00

quarkus-core: Leak of local configuration properties into Quarkus applications braces: fails to limit the number of characters it can handle undertow: Improper State Management in Proxy Protocol parsing causes information leakage org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks spring-webmvc: Path Traversal Vulnerability in Spring Applications Using RouterFunctions and FileSystemResource express: Improper Input Handling in Express Redirects send: Code Execution Vulnerability in Send Library serve-static: Improper Sanitization in serve-static path-to-regexp: Backtracking regular expressions cause ReDoS

 https://cve.radiocsirt.org/vuln/suse-su-2024:3720-1 SUSE-SU-2024:3720-1 — Security update for jetty-minimal 2026-10-02T15:34:55.205713+00:00

Security update for jetty-minimal

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-8184 UBUNTU-CVE-2024-8184 2026-10-02T15:34:55.205727+00:00

Affected: Ubuntu:14.04:LTS: jetty, Ubuntu:16.04:LTS: jetty

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3176 WID-SEC-W-2024-3176 — Eclipse Jetty: Mehrere Schwachstellen 2026-10-02T15:34:55.205748+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Eclipse Jetty ausnutzen, um einen Denial of Service Angriff zu erzeugen und Daten zu manipulieren.