https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T22:28:36.494808+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-24571 cnvd-2019-24571 2026-10-22T22:28:36.567150+00:00 cnvd-2019-24571 https://cve.radiocsirt.org/vuln/euvd-2026-48374 EUVD-2026-48374 2026-10-22T22:28:36.567191+00:00 EUVD-2026-48374 https://cve.radiocsirt.org/vuln/fkie_cve-2019-0202 fkie_cve-2019-0202 2026-10-22T22:28:36.567207+00:00

The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In Apache Storm versions 0.9.1-incubating to 1.2.2, it is possible to read files off the host's file system that were not intended to be accessible via these endpoints.

 https://cve.radiocsirt.org/vuln/ghsa-r9pv-hg64-jqrp GHSA-r9pv-hg64-jqrp — Exposure of Sensitive Information in Apache Storm Logviewer 2026-10-22T22:28:36.567239+00:00

Affected: Maven: org.apache.storm:storm-core

The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In Apache Storm versions 0.9.1-incubating to 1.2.2, it is possible to read files off the host's file system that were not intended to be accessible via these endpoints.

 https://cve.radiocsirt.org/vuln/gsd-2019-0202 gsd-2019-0202 2026-10-22T22:28:36.567264+00:00 gsd-2019-0202