https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:32:09.980285+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04737 bdu:2022-04737 2026-10-03T00:32:10.074354+00:00 bdu:2022-04737 https://cve.radiocsirt.org/vuln/cnvd-2017-29537 cnvd-2017-29537 2026-10-03T00:32:10.074389+00:00 cnvd-2017-29537 https://cve.radiocsirt.org/vuln/euvd-2026-77441 EUVD-2026-77441 2026-10-03T00:32:10.074404+00:00 EUVD-2026-77441 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12972 fkie_cve-2017-12972 2026-10-03T00:32:10.074416+00:00

In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext so that different plaintext is obtained for the same HMAC.

 https://cve.radiocsirt.org/vuln/ghsa-2qp9-wg27-9pcv GHSA-2qp9-wg27-9pcv — Nimbus JOSE+JWT missing overflow check 2026-10-03T00:32:10.074444+00:00

Affected: Maven: com.nimbusds:nimbus-jose-jwt

In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext so that different plaintext is obtained for the same HMAC.

 https://cve.radiocsirt.org/vuln/gsd-2017-12972 gsd-2017-12972 2026-10-03T00:32:10.074468+00:00 gsd-2017-12972 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770 WID-SEC-W-2022-0770 — IBM DB2: Mehrere Schwachstellen 2026-10-03T00:32:10.074481+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen