https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:02:37.818242+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-15744 cnvd-2018-15744 2026-10-03T04:02:37.822488+00:00 cnvd-2018-15744 https://cve.radiocsirt.org/vuln/euvd-2026-168707 EUVD-2026-168707 2026-10-03T04:02:37.822521+00:00 EUVD-2026-168707 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1306 fkie_cve-2018-1306 2026-10-03T04:02:37.822535+00:00

The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker could exploit this vulnerability to obtain configuration data and other sensitive information.

 https://cve.radiocsirt.org/vuln/ghsa-v49x-8hvm-q347 GHSA-v49x-8hvm-q347 — Exposure of Sensitive Information in Apache Pluto 2026-10-03T04:02:37.822562+00:00

Affected: Maven: org.apache.portals.pluto:pluto-container

The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker could exploit this vulnerability to obtain configuration data and other sensitive information.

 https://cve.radiocsirt.org/vuln/gsd-2018-1306 gsd-2018-1306 2026-10-03T04:02:37.822585+00:00 gsd-2018-1306