https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:59:00.030225+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-19567 cnvd-2018-19567 2026-10-04T10:59:00.230330+00:00 cnvd-2018-19567 https://cve.radiocsirt.org/vuln/euvd-2026-67136 EUVD-2026-67136 2026-10-04T10:59:00.230384+00:00 EUVD-2026-67136 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14642 fkie_cve-2018-14642 2026-10-04T10:59:00.230409+00:00

An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests.

 https://cve.radiocsirt.org/vuln/ghsa-vf6r-mmhc-3xcm GHSA-vf6r-mmhc-3xcm — Exposure of Sensitive Information to an Unauthorized Actor in Undertow 2026-10-04T10:59:00.230460+00:00

Affected: Maven: io.undertow:undertow-core

An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests.

 https://cve.radiocsirt.org/vuln/gsd-2018-14642 gsd-2018-14642 2026-10-04T10:59:00.230500+00:00 gsd-2018-14642 https://cve.radiocsirt.org/vuln/rhea-2019:1119 RHEA-2019:1119 — Red Hat Enhancement Advisory: rhvm-appliance security, bug fix, and enhancement update 2026-10-04T10:59:00.230519+00:00

undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-14642 UBUNTU-CVE-2018-14642 2026-10-04T10:59:00.230552+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:20.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests.