https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:30:26.348825+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-00402 bdu:2015-00402 2026-10-03T23:30:26.547659+00:00 bdu:2015-00402 https://cve.radiocsirt.org/vuln/certfr-2014-avi-208 certfr-2014-avi-208 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Apache Struts</span>. Elles permettent à un att… 2026-10-03T23:30:26.547701+00:00 certfr-2014-avi-208 https://cve.radiocsirt.org/vuln/euvd-2026-96693 EUVD-2026-96693 2026-10-03T23:30:26.547738+00:00 EUVD-2026-96693 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0112 fkie_cve-2014-0112 2026-10-03T23:30:26.547761+00:00

ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.

 https://cve.radiocsirt.org/vuln/ghsa-prjv-jj26-wf8h GHSA-prjv-jj26-wf8h — ClassLoader manipulation in Apache Struts 2026-10-03T23:30:26.547820+00:00

Affected: Maven: org.apache.struts:struts2-core

ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.

 https://cve.radiocsirt.org/vuln/gsd-2014-0112 gsd-2014-0112 2026-10-03T23:30:26.547852+00:00 gsd-2014-0112 https://cve.radiocsirt.org/vuln/jvndb-2014-000045 jvndb-2014-000045 2026-10-03T23:30:26.547865+00:00

Apache Struts provided by the Apache Software Foundation is a software framework for creating Java web applications. Apache Struts contains a vulnerability where the ClassLoader may be manipulated. NTT-CERT reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/rhsa-2019:0910 RHSA-2019:0910 — Red Hat Security Advisory: Red Hat Fuse 7.3 security update 2026-10-03T23:30:26.547885+00:00

struts2: ClassLoader manipulation via request parameters jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper jetty: HTTP request smuggling camel: Directory traversal in file producer

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2068 WID-SEC-W-2023-2068 — Oracle MySQL: Mehrere Schwachstellen 2026-10-03T23:30:26.547911+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.