https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:25:48.952588+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0855 certfr-2025-avi-0855 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent… 2026-10-02T13:25:48.966538+00:00 certfr-2025-avi-0855 https://cve.radiocsirt.org/vuln/cnvd-2018-19619 cnvd-2018-19619 2026-10-02T13:25:48.966588+00:00 cnvd-2018-19619 https://cve.radiocsirt.org/vuln/euvd-2026-61353 EUVD-2026-61353 2026-10-02T13:25:48.966606+00:00 EUVD-2026-61353 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3831 fkie_cve-2018-3831 2026-10-02T13:25:48.966618+00:00

Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elasticsearch _cluster/settings API, when queried, could leak sensitive configuration information such as passwords, tokens, or usernames. This could allow an authenticated Elasticsearch user to improperly view these details.

 https://cve.radiocsirt.org/vuln/ghsa-r9fv-qpm9-rj4g GHSA-r9fv-qpm9-rj4g — Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch 2026-10-02T13:25:48.966647+00:00

Affected: Maven: org.elasticsearch:elasticsearch

Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elasticsearch _cluster/settings API, when queried, could leak sensitive configuration information such as passwords, tokens, or usernames. This could allow an authenticated Elasticsearch user to improperly view these details.

 https://cve.radiocsirt.org/vuln/gsd-2018-3831 gsd-2018-3831 2026-10-02T13:25:48.966673+00:00 gsd-2018-3831 https://cve.radiocsirt.org/vuln/rhsa-2020:3192 RHSA-2020:3192 — Red Hat Security Advisory: Red Hat Fuse 7.7.0 release and security update 2026-10-02T13:25:48.966684+00:00

netty: Infinite loop vulnerability when handling renegotiation using SslProvider.OpenSsl elasticsearch: Information exposure via _cluster/settings API pdfbox: unbounded computation in parser resulting in a denial of service vertx: WebSocket HTTP upgrade implementation holds the entire http request in memory before the handshake dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure. spring-data-jpa: Additional information exposure with Spring Data JPA derived queries HTTP/2: large amount of data requests leads to denial of service hawtio: server side request forgery via initial /proxy/ substring of a URI apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default jackson-mapper-asl: XML external entity similar to CVE-2016-3720 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source cxf: OpenId Connect token service does not properly validate the clientId jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS jackson-databind: Serialization gadgets in classes of the commons-configuration package jackson-databind: Serialization gadgets in clas…