https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:32:35.432440+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elasticsearch-2021-22135 BIT-elasticsearch-2021-22135 2026-10-04T00:32:35.518825+00:00

Affected: Bitnami: elasticsearch

Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled on the index. Certain queries are able to enable the profiler and suggester which could lead to disclosing the existence of documents and fields the attacker should not be able to view.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0304 certfr-2025-avi-0304 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent… 2026-10-04T00:32:35.518880+00:00 certfr-2025-avi-0304 https://cve.radiocsirt.org/vuln/euvd-2026-22672 EUVD-2026-22672 2026-10-04T00:32:35.518902+00:00 EUVD-2026-22672 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22135 fkie_cve-2021-22135 2026-10-04T00:32:35.518915+00:00

Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled on the index. Certain queries are able to enable the profiler and suggester which could lead to disclosing the existence of documents and fields the attacker should not be able to view.

 https://cve.radiocsirt.org/vuln/ghsa-62ww-4p3p-7fhj GHSA-62ww-4p3p-7fhj — API information disclosure flaw in Elasticsearch 2026-10-04T00:32:35.518939+00:00

Affected: Maven: org.elasticsearch:elasticsearch

Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled on the index. Certain queries are able to enable the profiler and suggester which could lead to disclosing the existence of documents and fields the attacker should not be able to view.

 https://cve.radiocsirt.org/vuln/gsd-2021-22135 gsd-2021-22135 2026-10-04T00:32:35.518988+00:00 gsd-2021-22135 https://cve.radiocsirt.org/vuln/rhsa-2022:5606 RHSA-2022:5606 — Red Hat Security Advisory: Red Hat Integration Camel Extensions for Quarkus 2.7 security update 2026-10-04T00:32:35.519015+00:00

hadoop: WebHDFS client might send SPNEGO authorization header lz4: memory corruption due to an integer overflow bug caused by memmove argument elasticsearch: executing async search improperly stores HTTP headers leading to information disclosure elasticsearch: Document disclosure flaw in the Elasticsearch suggester elasticsearch: Document disclosure flaw when Document or Field Level Security is used jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients xstream: Injecting highly recursive collections or maps can cause a DoS quarkus: privilege escalation vulnerability with RestEasy Reactive scope leakage in Quarkus

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-22135 UBUNTU-CVE-2021-22135 2026-10-04T00:32:35.519047+00:00

Affected: Ubuntu:16.04:LTS: elasticsearch

Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled on the index. Certain queries are able to enable the profiler and suggester which could lead to disclosing the existence of documents and fields the attacker should not be able to view.