https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T20:21:04.944156+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99300 EUVD-2026-99300 2026-10-16T20:21:04.948784+00:00 EUVD-2026-99300 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3521 fkie_cve-2014-3521 2026-10-16T20:21:04.948847+00:00

The component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows remote authenticated users to bypass intended access restrictions via a crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-grqp-fw5g-3f7r GHSA-grqp-fw5g-3f7r 2026-10-16T20:21:04.948891+00:00

The component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows remote authenticated users to bypass intended access restrictions via a crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2014-3521 gsd-2014-3521 2026-10-16T20:21:04.948918+00:00 gsd-2014-3521 https://cve.radiocsirt.org/vuln/rhsa-2014:1194 RHSA-2014:1194 — Red Hat Security Advisory: conga security and bug fix update 2026-10-16T20:21:04.948937+00:00

(Plone): Restricted Python injection (Plone): Reflexive HTTP header injection (Plone): Restricted Python injection (Plone): Anonymous users can list user account names (Plone): Partial denial of service through Collections functionality (Plone): Partial denial of service through internal function (Plone): Anonymous users can batch change titles of content items conga: Multiple information leak flaws in various luci site extensions luci: unauthorized administrative access granted to non-administrative users