https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:59:09.605034+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-07947 cnvd-2016-07947 2026-10-02T14:59:09.610089+00:00 cnvd-2016-07947 https://cve.radiocsirt.org/vuln/euvd-2026-86169 EUVD-2026-86169 2026-10-02T14:59:09.610125+00:00 EUVD-2026-86169 https://cve.radiocsirt.org/vuln/fkie_cve-2016-6801 fkie_cve-2016-6801 2026-10-02T14:59:09.610140+00:00

Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the authentication of unspecified victims for requests that create a resource via an HTTP POST request with a (1) missing or (2) crafted Content-Type header.

 https://cve.radiocsirt.org/vuln/ghsa-9fc7-rhq3-wm7x GHSA-9fc7-rhq3-wm7x — Apache Jackrabbit Authentication Hijacking Vulnerability 2026-10-02T14:59:09.610170+00:00

Affected: Maven: org.apache.jackrabbit:jackrabbit-webdav

Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the authentication of unspecified victims for requests that create a resource via an HTTP POST request with a (1) missing or (2) crafted Content-Type header.

 https://cve.radiocsirt.org/vuln/gsd-2016-6801 gsd-2016-6801 2026-10-02T14:59:09.610199+00:00 gsd-2016-6801 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-6801 UBUNTU-CVE-2016-6801 2026-10-02T14:59:09.610211+00:00

Affected: Ubuntu:14.04:LTS: jackrabbit, Ubuntu:16.04:LTS: jackrabbit

Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the authentication of unspecified victims for requests that create a resource via an HTTP POST request with a (1) missing or (2) crafted Content-Type header.