https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:58:54.019089+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-11502 cnvd-2018-11502 2026-10-03T20:58:54.101598+00:00 cnvd-2018-11502 https://cve.radiocsirt.org/vuln/euvd-2026-61032 EUVD-2026-61032 2026-10-03T20:58:54.101636+00:00 EUVD-2026-61032 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1073 fkie_cve-2018-1073 2026-10-03T20:58:54.101651+00:00

The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and invalid passwords, allowing an attacker to discover the names of valid user accounts.

 https://cve.radiocsirt.org/vuln/ghsa-9ghh-fm37-vrf7 GHSA-9ghh-fm37-vrf7 2026-10-03T20:58:54.101682+00:00

The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and invalid passwords, allowing an attacker to discover the names of valid user accounts.

 https://cve.radiocsirt.org/vuln/gsd-2018-1073 gsd-2018-1073 2026-10-03T20:58:54.101698+00:00 gsd-2018-1073 https://cve.radiocsirt.org/vuln/rhsa-2018:1525 RHSA-2018:1525 — Red Hat Security Advisory: rhvm-appliance security and enhancement update 2026-10-03T20:58:54.101709+00:00

undertow: Client can use bogus uri in Digest authentication ovirt-engine: account enumeration through login to web console dhcp: Command injection vulnerability in the DHCP client NetworkManager integration script jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) python-paramiko: Authentication bypass in transport.py slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution