https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:36:11.112756+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0021 certfr-2025-avi-0021 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T15:36:11.186044+00:00 certfr-2025-avi-0021 https://cve.radiocsirt.org/vuln/cnvd-2015-04143 cnvd-2015-04143 2026-10-02T15:36:11.186085+00:00 cnvd-2015-04143 https://cve.radiocsirt.org/vuln/euvd-2026-90847 EUVD-2026-90847 2026-10-02T15:36:11.186100+00:00 EUVD-2026-90847 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2156 fkie_cve-2015-2156 2026-10-02T15:36:11.186112+00:00

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters.

 https://cve.radiocsirt.org/vuln/ghsa-xfv3-rrfm-f2rv GHSA-xfv3-rrfm-f2rv — Information Exposure in Netty 2026-10-02T15:36:11.186140+00:00

Affected: Maven: io.netty:netty-parent, Maven: org.jboss.netty:netty, Maven: io.netty:netty

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters.

 https://cve.radiocsirt.org/vuln/gsd-2015-2156 gsd-2015-2156 2026-10-02T15:36:11.186167+00:00 gsd-2015-2156 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-2156 UBUNTU-CVE-2015-2156 2026-10-02T15:36:11.186178+00:00

Affected: Ubuntu:Pro:14.04:LTS: netty, Ubuntu:16.04:LTS: netty-3.9

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770 WID-SEC-W-2022-0770 — IBM DB2: Mehrere Schwachstellen 2026-10-02T15:36:11.186197+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen