https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:46:26.863674+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99291 EUVD-2026-99291 2026-10-03T23:46:27.015941+00:00 EUVD-2026-99291 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3558 fkie_cve-2014-3558 2026-10-03T23:46:27.015988+00:00

ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.

 https://cve.radiocsirt.org/vuln/ghsa-845h-985r-jrqh GHSA-845h-985r-jrqh — Improper Authentication in Hibernate Validator 2026-10-03T23:46:27.016023+00:00

Affected: Maven: org.hibernate:hibernate-validator

ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.

 https://cve.radiocsirt.org/vuln/gsd-2014-3558 gsd-2014-3558 2026-10-03T23:46:27.016050+00:00 gsd-2014-3558 https://cve.radiocsirt.org/vuln/rhsa-2014:1285 RHSA-2014:1285 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.1 update 2026-10-03T23:46:27.016063+00:00

Validator: JSM bypass via ReflectionHelper

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3558 Withdrawn: UBUNTU-CVE-2014-3558 2026-10-03T23:46:27.016082+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: libhibernate-validator-java

ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 WID-SEC-W-2026-0180 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-03T23:46:27.016103+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.