https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T06:12:45.241298+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-54999 EUVD-2026-54999 2026-10-24T06:12:45.244423+00:00 EUVD-2026-54999 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12395 fkie_cve-2019-12395 2026-10-24T06:12:45.244454+00:00

In Webbukkit Dynmap 3.0-beta-3 or below, due to a missing login check in servlet/MapStorageHandler.java, an attacker can see a map image without login even if victim enables login-required in setting.

 https://cve.radiocsirt.org/vuln/ghsa-c58h-qgg9-9p43 GHSA-c58h-qgg9-9p43 2026-10-24T06:12:45.244485+00:00

In Webbukkit Dynmap 3.0-beta-3, with Spigot 1.13.2, due to a missing login check in servlet/MapStorageHandler.java, an attacker can see a map image without login despite an enabled login-required setting.

 https://cve.radiocsirt.org/vuln/gsd-2019-12395 gsd-2019-12395 2026-10-24T06:12:45.244502+00:00 gsd-2019-12395 https://cve.radiocsirt.org/vuln/jvndb-2019-000037 jvndb-2019-000037 2026-10-24T06:12:45.244514+00:00

A map plugin for Mincraft server "Dynmap" fails to restrict access permissions (CWE-284). RyotaK directly reported this vulnerability to the developer and coordinated on his own. After coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning