https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:43:57.680376+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-02936 bdu:2019-02936 2026-10-03T16:43:57.865905+00:00 bdu:2019-02936 https://cve.radiocsirt.org/vuln/certfr-2019-avi-586 certfr-2019-avi-586 — Une vulnérabilité a été découverte dans IBM QRadar. Elle permet à un attaquant de provoquer une exécution de code arbit… 2026-10-03T16:43:57.865950+00:00 certfr-2019-avi-586 https://cve.radiocsirt.org/vuln/cnvd-2019-24004 cnvd-2019-24004 2026-10-03T16:43:57.865991+00:00 cnvd-2019-24004 https://cve.radiocsirt.org/vuln/euvd-2026-53405 EUVD-2026-53405 2026-10-03T16:43:57.866016+00:00 EUVD-2026-53405 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10173 fkie_cve-2019-10173 2026-10-03T16:43:57.866038+00:00

It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote attacker to run arbitrary shell commands when unmarshalling XML or any supported format. e.g. JSON. (regression of CVE-2013-7285)

 https://cve.radiocsirt.org/vuln/ghsa-hf23-9pf7-388p GHSA-hf23-9pf7-388p — Deserialization of Untrusted Data and Code Injection in xstream 2026-10-03T16:43:57.866070+00:00

Affected: Maven: com.thoughtworks.xstream:xstream

It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote attacker to run arbitrary shell commands when unmarshalling XML or any supported format. e.g. JSON. (regression of CVE-2013-7285)

 https://cve.radiocsirt.org/vuln/gsd-2019-10173 gsd-2019-10173 2026-10-03T16:43:57.866094+00:00 gsd-2019-10173 https://cve.radiocsirt.org/vuln/rhsa-2019:1822 RHSA-2019:1822 — Red Hat Security Advisory: Red Hat Decision Manager 7.4.0 Security Update 2026-10-03T16:43:57.866105+00:00

jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis jackson-databind: improper polymorphic deserialization of types from Jodd-db library jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver jackson-databind: arbitrary code execution in slf4j-ext class jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes jackson-databind: exfiltration/XXE in some JDK classes jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class jackson-databind: improper polymorphic deserialization in axis2-transport-jms class jackson-databind: improper polymorphic deserialization in openjpa class jackson-databind: improper polymorphic deserialization in jboss-common-core class xstream: remote code execution due to insecure XML deserialization (regression of CVE-2013-7285)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10173 Withdrawn: UBUNTU-CVE-2019-10173 2026-10-03T16:43:57.866142+00:00

Withdrawn by the publisher.

Affected: Ubuntu:18.04:LTS: libxstream-java

It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote attacker to run arbitrary shell commands when unmarshalling XML or any supported format. e.g. JSON. (regression of CVE-2013-7285)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1689 WID-SEC-W-2024-1689 — Dell Data Protection Advisor: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-03T16:43:57.866161+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Programmcode auszuführen.