https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:38:11.631520+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99642 EUVD-2026-99642 2026-10-03T08:38:11.635225+00:00 EUVD-2026-99642 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3925 fkie_cve-2014-3925 2026-10-03T08:38:11.635256+00:00

sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.

 https://cve.radiocsirt.org/vuln/ghsa-37q9-ff6c-vjm6 GHSA-37q9-ff6c-vjm6 2026-10-03T08:38:11.635286+00:00

sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.

 https://cve.radiocsirt.org/vuln/gsd-2014-3925 gsd-2014-3925 2026-10-03T08:38:11.635304+00:00 gsd-2014-3925 https://cve.radiocsirt.org/vuln/rhba-2014:1200 RHBA-2014:1200 — Red Hat Bug Fix Advisory: sos bug fix update 2026-10-03T08:38:11.635316+00:00

sos: does not indicate data sent is potentially sensitive on Red Hat Enterprise Linux 5

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3925 UBUNTU-CVE-2014-3925 2026-10-03T08:38:11.635333+00:00

Affected: Ubuntu:14.04:LTS: sosreport

sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.