https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:34:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-49762 EUVD-2026-49762 https://cve.radiocsirt.org/vuln/euvd-2026-49762 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3879 <p>It was discovered that in the ovirt&#39;s REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission validation that should be performed against the calling user is skipped. A user with low privileges (eg Basic Operations) could exploit this flaw to delete disks attached to guests.</p> <p>It was discovered that in the ovirt&#39;s REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission validation that should be performed against the calling user is skipped. A user with low privileges (eg Basic Operations) could exploit this flaw to delete disks attached to guests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-3879 https://cve.radiocsirt.org/vuln/ghsa-9fjf-3vjh-p57c <p>It was discovered that in the ovirt&#39;s REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission validation that should be performed against the calling user is skipped. A user with low privileges (eg Basic Operations) could exploit this flaw to delete disks attached to guests.</p> <p>It was discovered that in the ovirt&#39;s REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission validation that should be performed against the calling user is skipped. A user with low privileges (eg Basic Operations) could exploit this flaw to delete disks attached to guests.</p> https://cve.radiocsirt.org/vuln/ghsa-9fjf-3vjh-p57c https://cve.radiocsirt.org/vuln/gsd-2019-3879 gsd-2019-3879 https://cve.radiocsirt.org/vuln/gsd-2019-3879 https://cve.radiocsirt.org/vuln/rhba-2019:0802 <p>ovirt-engine: Missing permissions check in web ui allows a user with basic privileges to delete disks</p> <p>ovirt-engine: Missing permissions check in web ui allows a user with basic privileges to delete disks</p> https://cve.radiocsirt.org/vuln/rhba-2019:0802