https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T10:47:12.455249+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-172384 EUVD-2026-172384 2026-10-09T10:47:12.458823+00:00 EUVD-2026-172384 https://cve.radiocsirt.org/vuln/fkie_cve-2011-3493 fkie_cve-2011-3493 2026-10-09T10:47:12.458861+00:00

Multiple stack-based buffer overflows in the DH_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) domain, (2) report_domain, (3) register_datahub, or (4) slave commands.

 https://cve.radiocsirt.org/vuln/ghsa-3c26-6j36-gq3h GHSA-3c26-6j36-gq3h 2026-10-09T10:47:12.458896+00:00

Multiple stack-based buffer overflows in the DH_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) domain, (2) report_domain, (3) register_datahub, or (4) slave commands.

 https://cve.radiocsirt.org/vuln/gsd-2011-3493 gsd-2011-3493 2026-10-09T10:47:12.458914+00:00 gsd-2011-3493 https://cve.radiocsirt.org/vuln/icsa-11-280-01 ICSA-11-280-01 — Cogent DataHub Vulnerabilities 2026-10-09T10:47:12.458927+00:00

Multiple stack-based buffer overflows in the DH_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) domain, (2) report_domain, (3) register_datahub, or (4) slave commands. Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in an HTTP request. Integer overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial of service (crash) via a negative or large Content-Length value. The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request with a trailing (1) space or (2) %2e (encoded dot).