https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T09:09:50.480058+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280726 EUVD-2026-280726 2026-10-07T09:09:50.482249+00:00 EUVD-2026-280726 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25447 fkie_cve-2019-25447 2026-10-07T09:09:50.482288+00:00

OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers to perform unauthorized actions by crafting malicious requests to endpoints like /database/, /command/, and /document/. Attackers can create or delete databases, modify schema classes, manage users, and create functions by sending authenticated requests without token validation, combined with reflected and stored cross-site scripting vulnerabilities in the web interface.

 https://cve.radiocsirt.org/vuln/ghsa-65c4-vf29-7265 GHSA-65c4-vf29-7265 2026-10-07T09:09:50.482323+00:00

OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers to perform unauthorized actions by crafting malicious requests to endpoints like /database/, /command/, and /document/. Attackers can create or delete databases, modify schema classes, manage users, and create functions by sending authenticated requests without token validation, combined with reflected and stored cross-site scripting vulnerabilities in the web interface.