https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:17:24.252167+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-09426 bdu:2015-09426 2026-10-03T05:17:24.325678+00:00 bdu:2015-09426 https://cve.radiocsirt.org/vuln/certa-2010-avi-571 certa-2010-avi-571 — Plusieurs vulnérabilités dans le logiciel Kerberos permettent à un utilisateur malveillant de contourner la politique d… 2026-10-03T05:17:24.325714+00:00 certa-2010-avi-571 https://cve.radiocsirt.org/vuln/euvd-2026-120341 EUVD-2026-120341 2026-10-03T05:17:24.325733+00:00 EUVD-2026-120341 https://cve.radiocsirt.org/vuln/fkie_cve-2010-4021 fkie_cve-2010-4021 2026-10-03T05:17:24.325745+00:00

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authenticated users to impersonate a client by rewriting an inner request, aka a "KrbFastReq forgery issue."

 https://cve.radiocsirt.org/vuln/ghsa-w2r7-v523-8fwv GHSA-w2r7-v523-8fwv 2026-10-03T05:17:24.325782+00:00

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authenticated users to impersonate a client by rewriting an inner request, aka a "KrbFastReq forgery issue."

 https://cve.radiocsirt.org/vuln/gsd-2010-4021 gsd-2010-4021 2026-10-03T05:17:24.325800+00:00 gsd-2010-4021 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10004-1 openSUSE-SU-2024:10004-1 — krb5-1.15-1.1 on GA media 2026-10-03T05:17:24.325810+00:00

krb5-1.15-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0602 WID-SEC-W-2022-0602 — IBM Security Verify Access: Mehrere Schwachstellen 2026-10-03T05:17:24.325842+00:00

Ein entfernter anonymer, authentisierter oder lokaler Angreifer oder ein Angreifer aus dem angrenzenden Netzwerk kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern, Informationen zu manipulieren, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen.