https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:36:51.306700+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-39677 cnvd-2019-39677 2026-10-03T20:36:51.373294+00:00 cnvd-2019-39677 https://cve.radiocsirt.org/vuln/euvd-2026-56040 EUVD-2026-56040 2026-10-03T20:36:51.373332+00:00 EUVD-2026-56040 https://cve.radiocsirt.org/vuln/fkie_cve-2019-13981 fkie_cve-2019-13981 2026-10-03T20:36:51.373346+00:00

In Directus 7 API through 2.3.0, remote attackers can read image files via a direct request for a filename under the uploads/_/originals/ directory. This is related to a configuration option in which the file collection can be non-public, but this option does not apply to the thumbnailer.

 https://cve.radiocsirt.org/vuln/ghsa-crjm-jrhg-6rm3 GHSA-crjm-jrhg-6rm3 2026-10-03T20:36:51.373377+00:00

In Directus 7 API through 2.3.0, remote attackers can read image files via a direct request for a filename under the uploads/_/originals/ directory. This is related to a configuration option in which the file collection can be non-public, but this option does not apply to the thumbnailer.

 https://cve.radiocsirt.org/vuln/gsd-2019-13981 gsd-2019-13981 2026-10-03T20:36:51.373393+00:00 gsd-2019-13981