https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:34:11.977233+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2018-00961 bdu:2018-00961 2026-10-03T19:34:11.988046+00:00 bdu:2018-00961 https://cve.radiocsirt.org/vuln/certfr-2018-avi-589 certfr-2018-avi-589 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T19:34:11.988082+00:00 certfr-2018-avi-589 https://cve.radiocsirt.org/vuln/cnvd-2018-10557 cnvd-2018-10557 2026-10-03T19:34:11.988101+00:00 cnvd-2018-10557 https://cve.radiocsirt.org/vuln/euvd-2026-175768 EUVD-2026-175768 2026-10-03T19:34:11.988113+00:00 EUVD-2026-175768 https://cve.radiocsirt.org/vuln/fkie_cve-2018-8013 fkie_cve-2018-8013 2026-10-03T19:34:11.988123+00:00

In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.

 https://cve.radiocsirt.org/vuln/ghsa-25gw-4pcc-45cf GHSA-25gw-4pcc-45cf — Deserialization of Untrusted Data in Apache Batik 2026-10-03T19:34:11.988149+00:00

Affected: Maven: org.apache.xmlgraphics:batik

In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.

 https://cve.radiocsirt.org/vuln/gsd-2018-8013 gsd-2018-8013 2026-10-03T19:34:11.988171+00:00 gsd-2018-8013 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-8013 UBUNTU-CVE-2018-8013 2026-10-03T19:34:11.988182+00:00

Affected: Ubuntu:14.04:LTS: batik, Ubuntu:Pro:16.04:LTS: batik

In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0027 WID-SEC-W-2023-0027 — IBM Tivoli Network Manager: Mehrere Schwachstellen 2026-10-03T19:34:11.988201+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und nicht spezifizierte Auswirkungen zu verursachen.