https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:57:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-159647 EUVD-2026-159647 https://cve.radiocsirt.org/vuln/euvd-2026-159647 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3046 <p>In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device logs. Also, downloaded logs may be used by an attacker to perform privilege escalation by using the session id of an authenticated user reported in logs.</p> <p>This issue affects org.eclipse.kura:org.eclipse.kura.web2 version range [2.0.600, 2.4.0], which is included in Eclipse Kura version range [5.0.0, 5.4.1]</p> <p>In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device logs. Also, downloaded logs may be used by an attacker to perform privilege escalation by using the session id of an authenticated user reported in logs.</p> <p>This issue affects org.eclipse.kura:org.eclipse.kura.web2 version range [2.0.600, 2.4.0], which is included in Eclipse Kura version range [5.0.0, 5.4.1]</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3046 https://cve.radiocsirt.org/vuln/ghsa-frc2-w2cc-x794 <p><strong>Affected:</strong> Maven: org.eclipse.kura:org.eclipse.kura.web2</p> <p>In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device logs. Also, downloaded logs may be used by an attacker to perform privilege escalation by using the session id of an authenticated user reported in logs.</p> <p>This issue affects org.eclipse.kura:org.eclipse.kura.web2 version range [2.0.600, 2.4.0], which is included in Eclipse Kura version range [5.0.0, 5.4.1].</p> <p><strong>Affected:</strong> Maven: org.eclipse.kura:org.eclipse.kura.web2</p> <p>In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device logs. Also, downloaded logs may be used by an attacker to perform privilege escalation by using the session id of an authenticated user reported in logs.</p> <p>This issue affects org.eclipse.kura:org.eclipse.kura.web2 version range [2.0.600, 2.4.0], which is included in Eclipse Kura version range [5.0.0, 5.4.1].</p> https://cve.radiocsirt.org/vuln/ghsa-frc2-w2cc-x794 https://cve.radiocsirt.org/vuln/gsd-2024-3046 gsd-2024-3046 https://cve.radiocsirt.org/vuln/gsd-2024-3046