https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T15:44:58.975781+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-24417 cnvd-2025-24417 2026-10-17T15:44:59.007611+00:00 cnvd-2025-24417 https://cve.radiocsirt.org/vuln/euvd-2026-255355 EUVD-2026-255355 2026-10-17T15:44:59.007646+00:00 EUVD-2026-255355 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62419 fkie_cve-2025-62419 2026-10-17T15:44:59.007660+00:00

DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC URL injection vulnerability exists in the DB2 and MongoDB data source configuration handlers. In the DB2 data source handler, when the extraParams field is empty, the HOSTNAME, PORT, and DATABASE values are directly concatenated into the JDBC URL without filtering illegal parameters. This allows an attacker to inject a malicious JDBC string into the HOSTNAME field to bypass previously patched vulnerabilities CVE-2025-57773 and CVE-2025-58045. The vulnerability is fixed in version 2.10.14. No known workarounds exist.