https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:30:19.133689+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2011-avi-504 certa-2011-avi-504 — Plusieurs vulnérabilités de Spring Framework ont été corrigées. Certaines permettent l'exécution de code arbitraire à d… 2026-10-03T10:30:19.136854+00:00 certa-2011-avi-504 https://cve.radiocsirt.org/vuln/euvd-2026-115713 EUVD-2026-115713 2026-10-03T10:30:19.136896+00:00 EUVD-2026-115713 https://cve.radiocsirt.org/vuln/fkie_cve-2011-2732 fkie_cve-2011-2732 2026-10-03T10:30:19.136911+00:00

CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter.

 https://cve.radiocsirt.org/vuln/ghsa-5xm9-rf63-wj7h GHSA-5xm9-rf63-wj7h — Improper Control of Generation of Code in Spring Security 2026-10-03T10:30:19.136941+00:00

Affected: Maven: org.springframework.security:spring-security-core

CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter.

 https://cve.radiocsirt.org/vuln/gsd-2011-2732 gsd-2011-2732 2026-10-03T10:30:19.136965+00:00 gsd-2011-2732