https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:22:03.540393+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-03826 bdu:2020-03826 2026-10-07T21:22:03.543942+00:00 bdu:2020-03826 https://cve.radiocsirt.org/vuln/cnvd-2019-43837 cnvd-2019-43837 2026-10-07T21:22:03.543974+00:00 cnvd-2019-43837 https://cve.radiocsirt.org/vuln/euvd-2026-58726 EUVD-2026-58726 2026-10-07T21:22:03.543989+00:00 EUVD-2026-58726 https://cve.radiocsirt.org/vuln/fkie_cve-2019-18393 fkie_cve-2019-18393 2026-10-07T21:22:03.544000+00:00

PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-59h8-h34r-q9cv GHSA-59h8-h34r-q9cv — Ignite Realtime Openfire directory traversal vulnerability 2026-10-07T21:22:03.544025+00:00

Affected: Maven: org.igniterealtime.openfire:parent

PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability. Version 4.5.0-beta contains a fix for the issue.

 https://cve.radiocsirt.org/vuln/gsd-2019-18393 gsd-2019-18393 2026-10-07T21:22:03.544048+00:00 gsd-2019-18393