https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:14:31.466934+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-118907 EUVD-2026-118907 2026-10-03T22:14:31.472596+00:00 EUVD-2026-118907 https://cve.radiocsirt.org/vuln/fkie_cve-2010-2074 fkie_cve-2010-2074 2026-10-03T22:14:31.472642+00:00

istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

 https://cve.radiocsirt.org/vuln/ghsa-xwjm-4v2q-p47f GHSA-xwjm-4v2q-p47f 2026-10-03T22:14:31.472687+00:00

istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

 https://cve.radiocsirt.org/vuln/gsd-2010-2074 gsd-2010-2074 2026-10-03T22:14:31.472709+00:00 gsd-2010-2074 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10235-1 openSUSE-SU-2024:10235-1 — w3m-0.5.3.git20161120-1.1 on GA media 2026-10-03T22:14:31.472722+00:00

w3m-0.5.3.git20161120-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2010:0565 RHSA-2010:0565 — Red Hat Security Advisory: w3m security update 2026-10-03T22:14:31.472774+00:00

w3m: doesn't handle NULL in Common Name properly

 https://cve.radiocsirt.org/vuln/suse-su-2016:3046-1 SUSE-SU-2016:3046-1 — Security update for w3m 2026-10-03T22:14:31.472805+00:00

Security update for w3m