https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T18:15:24.359111+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1107 certfr-2026-avi-1107 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un atta… 2026-10-04T18:15:24.444029+00:00 certfr-2026-avi-1107 https://cve.radiocsirt.org/vuln/cnvd-2015-04937 cnvd-2015-04937 2026-10-04T18:15:24.444073+00:00 cnvd-2015-04937 https://cve.radiocsirt.org/vuln/euvd-2026-93523 EUVD-2026-93523 2026-10-04T18:15:24.444090+00:00 EUVD-2026-93523 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5531 fkie_cve-2015-5531 2026-10-04T18:15:24.444102+00:00

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.

 https://cve.radiocsirt.org/vuln/ghsa-jjq8-vfjq-j6v4 GHSA-jjq8-vfjq-j6v4 — Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch 2026-10-04T18:15:24.444131+00:00

Affected: Maven: org.elasticsearch:elasticsearch

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.

 https://cve.radiocsirt.org/vuln/gsd-2015-5531 gsd-2015-5531 2026-10-04T18:15:24.444153+00:00 gsd-2015-5531 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5531 Withdrawn: UBUNTU-CVE-2015-5531 2026-10-04T18:15:24.444164+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: elasticsearch

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2234 WID-SEC-W-2025-2234 — Elasticsearch: Mehrere Schwachstellen ermöglichen Codeausführung und die Offenlegung von Informationen 2026-10-04T18:15:24.444182+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um beliebigen Programmcode auszuführen und Informationen offenzulegen.