https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:17:39.722607+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-04024 cnvd-2015-04024 2026-10-02T23:17:39.796304+00:00 cnvd-2015-04024 https://cve.radiocsirt.org/vuln/euvd-2026-90622 EUVD-2026-90622 2026-10-02T23:17:39.796342+00:00 EUVD-2026-90622 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1870 fkie_cve-2015-1870 2026-10-02T23:17:39.796357+00:00

The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-v6ww-8wv5-ggw9 GHSA-v6ww-8wv5-ggw9 2026-10-02T23:17:39.796387+00:00

The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2015-1870 gsd-2015-1870 2026-10-02T23:17:39.796403+00:00 gsd-2015-1870 https://cve.radiocsirt.org/vuln/rhsa-2015:1083 RHSA-2015:1083 — Red Hat Security Advisory: abrt security update 2026-10-02T23:17:39.796414+00:00

abrt: default event scripts follow symbolic links abrt: default abrt event scripts lead to information disclosure abrt: abrt-hook-ccpp writes core dumps to existing files owned by others abrt: does not validate contents of uploaded problem reports abrt: abrt-dbus does not guard against crafted problem directory path arguments abrt: directory traversals in several D-Bus methods implemented by abrt-dbus abrt: missing process environment sanitizaton in abrt-action-install-debuginfo-to-abrt-cache abrt: Various race-conditions and symlink issues found in abrt

 https://cve.radiocsirt.org/vuln/rhsa-2015:1210 RHSA-2015:1210 — Red Hat Security Advisory: abrt security update 2026-10-02T23:17:39.796442+00:00

abrt: default event scripts follow symbolic links abrt: default abrt event scripts lead to information disclosure abrt: abrt-hook-ccpp writes core dumps to existing files owned by others abrt: does not validate contents of uploaded problem reports abrt: missing process environment sanitizaton in abrt-action-install-debuginfo-to-abrt-cache abrt: Various race-conditions and symlink issues found in abrt