<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-04T10:56:56.035117+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-117304</id>
    <title>EUVD-2026-117304</title>
    <updated>2026-10-04T10:56:56.041234+00:00</updated>
    <content>EUVD-2026-117304</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-117304"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2010-0013</id>
    <title>fkie_cve-2010-0013</title>
    <updated>2026-10-04T10:56:56.041267+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122.  NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2010-0013"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-v6ph-x2c7-6g37</id>
    <title>GHSA-v6ph-x2c7-6g37</title>
    <updated>2026-10-04T10:56:56.041301+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122.  NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-v6ph-x2c7-6g37"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2010-0013</id>
    <title>gsd-2010-0013</title>
    <updated>2026-10-04T10:56:56.041320+00:00</updated>
    <content>gsd-2010-0013</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2010-0013"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2024:10432-1</id>
    <title>openSUSE-SU-2024:10432-1 — finch-2.11.0-4.1 on GA media</title>
    <updated>2026-10-04T10:56:56.041332+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>finch-2.11.0-4.1 on GA media</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2024:10432-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhsa-2010:0044</id>
    <title>RHSA-2010:0044 — Red Hat Security Advisory: pidgin security update</title>
    <updated>2026-10-04T10:56:56.041373+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>pidgin/libpurple: MSN custom smiley request directory traversal file disclosure</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhsa-2010:0044"/>
  </entry>
</feed>
