https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:03:03.953821+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-01922 cnvd-2016-01922 2026-10-03T07:03:04.148378+00:00 cnvd-2016-01922 https://cve.radiocsirt.org/vuln/euvd-2026-83723 EUVD-2026-83723 2026-10-03T07:03:04.148418+00:00 EUVD-2026-83723 https://cve.radiocsirt.org/vuln/fkie_cve-2016-3674 fkie_cve-2016-3674 2026-10-03T07:03:04.148432+00:00

Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.

 https://cve.radiocsirt.org/vuln/ghsa-rgh3-987h-wpmw GHSA-rgh3-987h-wpmw — XML External Entity Injection in XStream 2026-10-03T07:03:04.148462+00:00

Affected: Maven: com.thoughtworks.xstream:xstream

Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.

 https://cve.radiocsirt.org/vuln/gsd-2016-3674 gsd-2016-3674 2026-10-03T07:03:04.148487+00:00 gsd-2016-3674 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10592-1 openSUSE-SU-2024:10592-1 — xstream-1.4.18-1.1 on GA media 2026-10-03T07:03:04.148499+00:00

xstream-1.4.18-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2016:2822 RHSA-2016:2822 — Red Hat Security Advisory: Red Hat JBoss BPM Suite security update 2026-10-03T07:03:04.148525+00:00

XStream: enabled processing of external entities Workbench: Path traversal vulnerability Stored XSS in business process editor

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-3674 UBUNTU-CVE-2016-3674 2026-10-03T07:03:04.148543+00:00

Affected: Ubuntu:Pro:14.04:LTS: libxstream-java, Ubuntu:Pro:16.04:LTS: libxstream-java

Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen 2026-10-03T07:03:04.148564+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.