https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T01:01:56.068932+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-06103 cnvd-2015-06103 2026-10-08T01:01:56.073639+00:00 cnvd-2015-06103 https://cve.radiocsirt.org/vuln/euvd-2026-91488 EUVD-2026-91488 2026-10-08T01:01:56.073678+00:00 EUVD-2026-91488 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2912 fkie_cve-2015-2912 2026-10-08T01:01:56.073693+00:00

The JSONP endpoint in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict callback values, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and obtain sensitive information, via a crafted HTTP request.

 https://cve.radiocsirt.org/vuln/ghsa-p8ww-vv84-c2rm GHSA-p8ww-vv84-c2rm — OrientDB-Server vulnerable to Cross-Site Request Forgery 2026-10-08T01:01:56.073724+00:00

Affected: Maven: com.orientechnologies:orientdb-studio

The JSONP endpoint in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict callback values, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and obtain sensitive information, via a crafted HTTP request.

 https://cve.radiocsirt.org/vuln/gsd-2015-2912 gsd-2015-2912 2026-10-08T01:01:56.073748+00:00 gsd-2015-2912