https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:16:56.713799+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-04135 bdu:2015-04135 2026-10-03T11:16:56.860355+00:00 bdu:2015-04135 https://cve.radiocsirt.org/vuln/euvd-2026-108585 EUVD-2026-108585 2026-10-03T11:16:56.860393+00:00 EUVD-2026-108585 https://cve.radiocsirt.org/vuln/fkie_cve-2013-6408 fkie_cve-2013-6408 2026-10-03T11:16:56.860409+00:00

The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407.

 https://cve.radiocsirt.org/vuln/ghsa-45w3-2hvv-pfxq GHSA-45w3-2hvv-pfxq — XML Injection in Apache Solr 2026-10-03T11:16:56.860442+00:00

Affected: Maven: org.apache.solr:solr-core

The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407.

 https://cve.radiocsirt.org/vuln/gsd-2013-6408 gsd-2013-6408 2026-10-03T11:16:56.860468+00:00 gsd-2013-6408 https://cve.radiocsirt.org/vuln/rhsa-2013:1844 RHSA-2013:1844 — Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.4.0 update 2026-10-03T11:16:56.860480+00:00

Solr: XML eXternal Entity (XXE) flaw in XML and XSLT UpdateRequestHandler Solr: directory traversal when loading XSL stylesheets and Velocity templates Solr: XML eXternal Entity (XXE) flaw in XML and XSLT UpdateRequestHandler Solr: XML eXternal Entity (XXE) flaw in DocumentAnalysisRequestHandler

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-6408 Withdrawn: UBUNTU-CVE-2013-6408 2026-10-03T11:16:56.860503+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: lucene-solr, Ubuntu:16.04:LTS: lucene-solr

The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407.