https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:49:51.791884+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-04135 bdu:2015-04135 2026-10-03T04:49:51.920582+00:00 bdu:2015-04135 https://cve.radiocsirt.org/vuln/euvd-2026-108611 EUVD-2026-108611 2026-10-03T04:49:51.920623+00:00 EUVD-2026-108611 https://cve.radiocsirt.org/vuln/fkie_cve-2013-6397 fkie_cve-2013-6397 2026-10-03T04:49:51.920637+00:00

Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.

 https://cve.radiocsirt.org/vuln/ghsa-j8qw-mwmv-28cg GHSA-j8qw-mwmv-28cg — Improper Limitation of a Pathname to a Restricted Directory in Apache Solr 2026-10-03T04:49:51.920668+00:00

Affected: Maven: org.apache.solr:solr-core

Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.

 https://cve.radiocsirt.org/vuln/gsd-2013-6397 gsd-2013-6397 2026-10-03T04:49:51.920693+00:00 gsd-2013-6397 https://cve.radiocsirt.org/vuln/rhsa-2013:1844 RHSA-2013:1844 — Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.4.0 update 2026-10-03T04:49:51.920705+00:00

Solr: XML eXternal Entity (XXE) flaw in XML and XSLT UpdateRequestHandler Solr: directory traversal when loading XSL stylesheets and Velocity templates Solr: XML eXternal Entity (XXE) flaw in XML and XSLT UpdateRequestHandler Solr: XML eXternal Entity (XXE) flaw in DocumentAnalysisRequestHandler

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-6397 Withdrawn: UBUNTU-CVE-2013-6397 2026-10-03T04:49:51.920727+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: lucene-solr, Ubuntu:16.04:LTS: lucene-solr

Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.