https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:47:10.658051+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-15515 cnvd-2017-15515 2026-10-04T05:47:10.745237+00:00 cnvd-2017-15515 https://cve.radiocsirt.org/vuln/euvd-2026-76023 EUVD-2026-76023 2026-10-04T05:47:10.745275+00:00 EUVD-2026-76023 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9735 fkie_cve-2017-9735 2026-10-04T05:47:10.745290+00:00

Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords.

 https://cve.radiocsirt.org/vuln/ghsa-wfcc-pff6-rgc5 GHSA-wfcc-pff6-rgc5 — Jetty vulnerable to exposure of sensitive information due to observable discrepancy 2026-10-04T05:47:10.745321+00:00

Affected: Maven: org.eclipse.jetty:jetty-server

Jetty through 9.4.x contains a timing channel attack in `util/security/Password.java`, which allows attackers to obtain access by observing elapsed times before rejection of incorrect passwords.

 https://cve.radiocsirt.org/vuln/gsd-2017-9735 gsd-2017-9735 2026-10-04T05:47:10.745348+00:00 gsd-2017-9735 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9735 UBUNTU-CVE-2017-9735 2026-10-04T05:47:10.745361+00:00

Affected: Ubuntu:14.04:LTS: jetty, Ubuntu:14.04:LTS: jetty8, Ubuntu:16.04:LTS: jetty, Ubuntu:16.04:LTS: jetty8, Ubuntu:16.04:LTS: jetty9

Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2993 WID-SEC-W-2023-2993 — Atlassian Bamboo, Atlassian Bitbucket, Atlassian Confluence and Atlassian Jira Software: Mehrere Schwachstellen 2026-10-04T05:47:10.745386+00:00

Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Atlassian Bitbucket, Atlassian Confluence und Atlassian Jira Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder einen Cross-Site-Scripting-Angriff durchzuführen.