https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:19:30.604627+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-33551 cnvd-2017-33551 2026-10-03T20:19:30.813795+00:00 cnvd-2017-33551 https://cve.radiocsirt.org/vuln/euvd-2026-75085 EUVD-2026-75085 2026-10-03T20:19:30.813834+00:00 EUVD-2026-75085 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7957 fkie_cve-2017-7957 2026-10-03T20:19:30.813849+00:00

XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call.

 https://cve.radiocsirt.org/vuln/ghsa-7hwc-46rm-65jh GHSA-7hwc-46rm-65jh — Denial of service in XStream 2026-10-03T20:19:30.813880+00:00

Affected: Maven: com.thoughtworks.xstream:xstream

XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call.

 https://cve.radiocsirt.org/vuln/gsd-2017-7957 gsd-2017-7957 2026-10-03T20:19:30.813904+00:00 gsd-2017-7957 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10592-1 openSUSE-SU-2024:10592-1 — xstream-1.4.18-1.1 on GA media 2026-10-03T20:19:30.813916+00:00

xstream-1.4.18-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2017:1832 RHSA-2017:1832 — Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R4 security and bug fix update 2026-10-03T20:19:30.813945+00:00

bouncycastle: Information disclosure in GCMBlockCipher camel-jacksonxml: Unmarshalling operation are vulnerable to RCE Security: Improper handling of path parameters allows bypassing the security constraint hawtio: Proxy is sharing cookies among all the clients hawtio: information Disclosure flaws due to unsafe path traversal cxf: CXF OAuth2 Hawk and JOSE MAC Validation code are vulnerable to timing attacks camel-core: Validation component vulnerable to SSRF via remote DTDs and XXE cxf: CXF JAX-RS XML Security streaming clients do not validate that the service response was signed or encrypted cxf: CXF's STSClient uses a flawed way of caching tokens that are associated with delegation tokens logback: Serialization vulnerability in SocketServer and ServerSocketReceiver XStream: DoS when unmarshalling void type

 https://cve.radiocsirt.org/vuln/suse-ru-2019:1006-1 SUSE-RU-2019:1006-1 — Security update for SUSE Manager Server 3.2 2026-10-03T20:19:30.813977+00:00

Security update for SUSE Manager Server 3.2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7957 UBUNTU-CVE-2017-7957 2026-10-03T20:19:30.813991+00:00

Affected: Ubuntu:14.04:LTS: libxstream-java, Ubuntu:16.04:LTS: libxstream-java

XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen 2026-10-03T20:19:30.814012+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.