https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:16:44.678101+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-06703 cnvd-2018-06703 2026-10-02T21:16:44.752489+00:00 cnvd-2018-06703 https://cve.radiocsirt.org/vuln/euvd-2026-178323 EUVD-2026-178323 2026-10-02T21:16:44.752527+00:00 EUVD-2026-178323 https://cve.radiocsirt.org/vuln/fkie_cve-2016-8750 fkie_cve-2016-8750 2026-10-02T21:16:44.752542+00:00

Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-chj8-5xgw-wcvj GHSA-chj8-5xgw-wcvj — Moderate severity vulnerability that affects org.apache.karaf:apache-karaf 2026-10-02T21:16:44.752570+00:00

Affected: Maven: org.apache.karaf:apache-karaf

Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2016-8750 gsd-2016-8750 2026-10-02T21:16:44.752593+00:00 gsd-2016-8750 https://cve.radiocsirt.org/vuln/rhsa-2018:1322 RHSA-2018:1322 — Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R7 security and bug fix update 2026-10-02T21:16:44.752604+00:00

karaf: LDAP injection in LDAPLoginModule undertow: HTTP Request smuggling vulnerability (incomplete fix of CVE-2017-2666) undertow: improper whitespace parsing leading to potential HTTP request smuggling poi: Parsing of multiple file types can cause a denial of service via infinite loop or out of memory exception plexus-utils: Mishandled strings in Commandline class allow for command injection