https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T19:35:28.973001+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-09728 cnvd-2017-09728 2026-10-16T19:35:29.043756+00:00 cnvd-2017-09728 https://cve.radiocsirt.org/vuln/euvd-2026-91651 EUVD-2026-91651 2026-10-16T19:35:29.043799+00:00 EUVD-2026-91651 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3191 fkie_cve-2015-3191 2026-10-16T19:35:29.043815+00:00

With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the change_email form in UAA is vulnerable to a CSRF attack. This allows an attacker to trigger an e-mail change for a user logged into a cloud foundry instance via a malicious link on a attacker controlled site. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected.

 https://cve.radiocsirt.org/vuln/ghsa-442q-44xh-2275 GHSA-442q-44xh-2275 2026-10-16T19:35:29.043855+00:00

With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the change_email form in UAA is vulnerable to a CSRF attack. This allows an attacker to trigger an e-mail change for a user logged into a cloud foundry instance via a malicious link on a attacker controlled site. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected.

 https://cve.radiocsirt.org/vuln/gsd-2015-3191 gsd-2015-3191 2026-10-16T19:35:29.043875+00:00 gsd-2015-3191