https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:36:47.337712+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1094 certfr-2026-avi-1094 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T05:36:47.528028+00:00 certfr-2026-avi-1094 https://cve.radiocsirt.org/vuln/euvd-2026-354917 EUVD-2026-354917 2026-10-03T05:36:47.528085+00:00 EUVD-2026-354917 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75838 fkie_cve-2026-75838 2026-10-03T05:36:47.528100+00:00

DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in IN_PLACE sanitization where element-removal hooks fail to neutralize detached subtrees. Attackers can supply HTML with event handlers on descendant elements that execute after sanitization completes, even though the returned root appears clean.

 https://cve.radiocsirt.org/vuln/ghsa-748c-f84h-hp2v GHSA-748c-f84h-hp2v 2026-10-03T05:36:47.528131+00:00

DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in IN_PLACE sanitization where element-removal hooks fail to neutralize detached subtrees. Attackers can supply HTML with event handlers on descendant elements that execute after sanitization completes, even though the returned root appears clean.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0373 NCSC-2026-0373 — Kwetsbaarheden verholpen in Oracle Database Producten 2026-10-03T05:36:47.528148+00:00 NCSC-2026-0373 https://cve.radiocsirt.org/vuln/rhsa-2026:62260 RHSA-2026:62260 — Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.30.0 Release. 2026-10-03T05:36:47.528178+00:00

netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability curl: curl: Insecure connection establishment due to TLS configuration mismatch shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators curl: curl: Man-in-the-middle attack via SSH host key bypass org.eclipse.parsson/parsson: Eclipse Parsson: Denial of Service via uncontrolled resource consumption in JSON parsing jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections form-data: form-data: Form field override via CRLF injection undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects io.vertx/vertx-web: Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object net/mail: golang: Go net/mail: Denial of Service via crafted email inputs golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check golang.org/x/cryp…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-75838 UBUNTU-CVE-2026-75838 2026-10-03T05:36:47.528324+00:00

Affected: Ubuntu:22.04:LTS: node-dompurify, Ubuntu:24.04:LTS: node-dompurify, Ubuntu:26.04:LTS: node-dompurify

DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in IN_PLACE sanitization where element-removal hooks fail to neutralize detached subtrees. Attackers can supply HTML with event handlers on descendant elements that execute after sanitization completes, even though the returned root appears clean.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3572 WID-SEC-W-2026-3572 — IBM i: Mehrere Schwachstellen 2026-10-03T05:36:47.528350+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM i ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um Dateien zu manipulieren.