https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:52:41.803361+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-09726 bdu:2015-09726 2026-10-02T22:52:41.898656+00:00 bdu:2015-09726 https://cve.radiocsirt.org/vuln/certa-2013-avi-107 certa-2013-avi-107 — Une vulnérabilité a été corrigée dans <span class="textit">cURL libcurl</span>. Elle permet à un attaquant de provoquer… 2026-10-02T22:52:41.898692+00:00 certa-2013-avi-107 https://cve.radiocsirt.org/vuln/euvd-2026-104558 EUVD-2026-104558 2026-10-02T22:52:41.898718+00:00 EUVD-2026-104558 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0249 fkie_cve-2013-0249 2026-10-02T22:52:41.898750+00:00

Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.

 https://cve.radiocsirt.org/vuln/ghsa-mj69-wpmp-9c9f GHSA-mj69-wpmp-9c9f 2026-10-02T22:52:41.898793+00:00

Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.

 https://cve.radiocsirt.org/vuln/gsd-2013-0249 gsd-2013-0249 2026-10-02T22:52:41.898811+00:00 gsd-2013-0249 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10303-1 openSUSE-SU-2024:10303-1 — curl-7.51.0-1.1 on GA media 2026-10-02T22:52:41.898821+00:00

curl-7.51.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1659 WID-SEC-W-2023-1659 — cURL: Schwachstelle ermöglicht Ausführen beliebigen Programmcodes mit den Rechten des Dienstes 2026-10-02T22:52:41.898853+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in cURL ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.