https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:25:37.725661+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-06127 bdu:2015-06127 2026-10-02T17:25:38.014123+00:00 bdu:2015-06127 https://cve.radiocsirt.org/vuln/certfr-2015-avi-008 certfr-2015-avi-008 — De multiples vulnérabilités ont été corrigées dans <span class="textit">OpenSSL</span>. Elles permettent à un attaquant… 2026-10-02T17:25:38.014208+00:00 certfr-2015-avi-008 https://cve.radiocsirt.org/vuln/cnvd-2015-00215 cnvd-2015-00215 2026-10-02T17:25:38.014251+00:00 cnvd-2015-00215 https://cve.radiocsirt.org/vuln/euvd-2026-89216 EUVD-2026-89216 2026-10-02T17:25:38.014273+00:00 EUVD-2026-89216 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0204 fkie_cve-2015-0204 2026-10-02T17:25:38.014292+00:00

The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.

 https://cve.radiocsirt.org/vuln/ghsa-ff55-77ff-xv8x GHSA-ff55-77ff-xv8x 2026-10-02T17:25:38.014342+00:00

The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.

 https://cve.radiocsirt.org/vuln/gsd-2015-0204 gsd-2015-0204 2026-10-02T17:25:38.014382+00:00 gsd-2015-0204 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10271-1 openSUSE-SU-2024:10271-1 — libopenssl-devel-1.0.2j-2.2 on GA media 2026-10-02T17:25:38.014403+00:00

libopenssl-devel-1.0.2j-2.2 on GA media

 https://cve.radiocsirt.org/vuln/rhea-2015:0955 RHEA-2015:0955 — Red Hat Enhancement Advisory: Red Hat JBoss Web Server 3.0.0 enhancement update 2026-10-02T17:25:38.014520+00:00

openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK) mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages

 https://cve.radiocsirt.org/vuln/suse-ru-2015:0769-1 SUSE-RU-2015:0769-1 — Security update for openssl1 2026-10-02T17:25:38.014555+00:00

Security update for openssl1

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0204 UBUNTU-CVE-2015-0204 2026-10-02T17:25:38.014620+00:00

Affected: Ubuntu:14.04:LTS: openssl

The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 WID-SEC-W-2026-0180 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-02T17:25:38.014674+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.