https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:34:57.536865+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-04859 bdu:2019-04859 2026-10-07T10:34:57.541916+00:00 bdu:2019-04859 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0556 certfr-2026-avi-0556 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-07T10:34:57.541950+00:00 certfr-2026-avi-0556 https://cve.radiocsirt.org/vuln/cnvd-2019-26390 cnvd-2019-26390 2026-10-07T10:34:57.541970+00:00 cnvd-2019-26390 https://cve.radiocsirt.org/vuln/euvd-2026-256195 EUVD-2026-256195 2026-10-07T10:34:57.541983+00:00 EUVD-2026-256195 https://cve.radiocsirt.org/vuln/fkie_cve-2019-0193 fkie_cve-2019-0193 2026-10-07T10:34:57.541993+00:00

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property "enable.dih.dataConfigParam" to true.

 https://cve.radiocsirt.org/vuln/ghsa-3gm7-v7vw-866c GHSA-3gm7-v7vw-866c — XML External Entity (XXE) Injection in Apache Solr 2026-10-07T10:34:57.542022+00:00

Affected: Maven: org.apache.solr:solr-core

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property "enable.dih.dataConfigParam" to true.

 https://cve.radiocsirt.org/vuln/gsd-2019-0193 gsd-2019-0193 2026-10-07T10:34:57.542048+00:00 gsd-2019-0193 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-0193 UBUNTU-CVE-2019-0193 2026-10-07T10:34:57.542059+00:00

Affected: Ubuntu:Pro:14.04:LTS: lucene-solr, Ubuntu:Pro:16.04:LTS: lucene-solr, Ubuntu:Pro:18.04:LTS: lucene-solr

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property "enable.dih.dataConfigParam" to true.