https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:29:42.769985+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2011-avi-410 certa-2011-avi-410 — Plusieurs vulnérabilités autorisant une personne malintentionnée à injecter indirectement du code arbitraire à distance… 2026-10-03T08:29:42.774401+00:00 certa-2011-avi-410 https://cve.radiocsirt.org/vuln/euvd-2026-115743 EUVD-2026-115743 2026-10-03T08:29:42.774436+00:00 EUVD-2026-115743 https://cve.radiocsirt.org/vuln/fkie_cve-2011-2753 fkie_cve-2011-2753 2026-10-03T08:29:42.774451+00:00

Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.

 https://cve.radiocsirt.org/vuln/ghsa-r7jq-728g-6qg5 GHSA-r7jq-728g-6qg5 2026-10-03T08:29:42.774479+00:00

Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.

 https://cve.radiocsirt.org/vuln/gsd-2011-2753 gsd-2011-2753 2026-10-03T08:29:42.774495+00:00 gsd-2011-2753 https://cve.radiocsirt.org/vuln/rhsa-2012:0103 RHSA-2012:0103 — Red Hat Security Advisory: squirrelmail security update 2026-10-03T08:29:42.774507+00:00

SquirrelMail: Mail Fetch plugin -- port-scans via non-standard POP3 server ports SquirrelMail: DoS (disk space consumption) by random IMAP login attempts with 8-bit characters in the password SquirrelMail: Prone to clickjacking attacks SquirrelMail: Multiple XSS flaws SquirrelMail: XSS in <style> tag handling SquirrelMail: CRLF injection vulnerability SquirrelMail: CSRF in the empty trash feature and in Index Order page

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2011-2753 Withdrawn: UBUNTU-CVE-2011-2753 2026-10-03T08:29:42.774531+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: squirrelmail, Ubuntu:16.04:LTS: squirrelmail

Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.