https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:19:45.476724+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-17648 cnvd-2018-17648 2026-10-03T15:19:45.481279+00:00 cnvd-2018-17648 https://cve.radiocsirt.org/vuln/euvd-2026-198325 EUVD-2026-198325 2026-10-03T15:19:45.481316+00:00 EUVD-2026-198325 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14335 fkie_cve-2018-14335 2026-10-03T15:19:45.481330+00:00

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.

 https://cve.radiocsirt.org/vuln/ghsa-wm64-883p-84j3 GHSA-wm64-883p-84j3 2026-10-03T15:19:45.481360+00:00

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.

 https://cve.radiocsirt.org/vuln/gsd-2018-14335 gsd-2018-14335 2026-10-03T15:19:45.481376+00:00 gsd-2018-14335 https://cve.radiocsirt.org/vuln/rhsa-2020:0727 RHSA-2020:0727 — Red Hat Security Advisory: Red Hat Data Grid 7.3.3 security update 2026-10-03T15:19:45.481387+00:00

h2: Information Exposure due to insecure handling of permissions in the backup wildfly: Race condition on PID file allows for termination of arbitrary processes by local users undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed HTTP/2: flood using PING frames results in unbounded memory growth HTTP/2: flood using HEADERS frames results in unbounded memory growth HTTP/2: flood using SETTINGS frames results in unbounded memory growth HTTP/2: flood using empty frames results in excessive resource consumption xstream: remote code execution due to insecure XML deserialization (regression of CVE-2013-7285) infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods undertow: Information leak in requests for directories without trailing slashes undertow: DEBUG log for io.undertow.request.security if enabled leaks credentials to log files jackson-databind: default typing mishandling leading to remote code execution

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-14335 UBUNTU-CVE-2018-14335 2026-10-03T15:19:45.481417+00:00

Affected: Ubuntu:Pro:16.04:LTS: h2database, Ubuntu:Pro:18.04:LTS: h2database, Ubuntu:20.04:LTS: h2database

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.