https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:29:29.509551+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-09820 bdu:2015-09820 2026-10-02T17:29:29.597102+00:00 bdu:2015-09820 https://cve.radiocsirt.org/vuln/bell-cve-2015-0288 Withdrawn: BELL-CVE-2015-0288 — CVE-2015-0288 does not affect BellSoft software 2026-10-02T17:29:29.597167+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2015-avi-089 certfr-2015-avi-089 — De multiples vulnérabilités ont été corrigées dans <span class="textit">OpenSSL</span>. Elles permettent à un attaquant… 2026-10-02T17:29:29.597189+00:00 certfr-2015-avi-089 https://cve.radiocsirt.org/vuln/cnvd-2015-01899 cnvd-2015-01899 2026-10-02T17:29:29.597205+00:00 cnvd-2015-01899 https://cve.radiocsirt.org/vuln/euvd-2026-89244 EUVD-2026-89244 2026-10-02T17:29:29.597218+00:00 EUVD-2026-89244 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0288 fkie_cve-2015-0288 2026-10-02T17:29:29.597229+00:00

The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.

 https://cve.radiocsirt.org/vuln/ghsa-6m24-334v-vm3f GHSA-6m24-334v-vm3f 2026-10-02T17:29:29.597258+00:00

The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.

 https://cve.radiocsirt.org/vuln/gsd-2015-0288 gsd-2015-0288 2026-10-02T17:29:29.597274+00:00 gsd-2015-0288 https://cve.radiocsirt.org/vuln/icsa-22-349-21 ICSA-22-349-21 — Siemens SCALANCE X-200RNA Switch Devices 2026-10-02T17:29:29.597285+00:00

OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack. sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190. The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data. The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server. The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allows remote…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10200-1 openSUSE-SU-2024:10200-1 — libmysql56client18-32bit-5.6.34-1.1 on GA media 2026-10-02T17:29:29.597465+00:00

libmysql56client18-32bit-5.6.34-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhea-2015:1770 RHEA-2015:1770 — Red Hat Enhancement Advisory: Red Hat JBoss Web Server 3.0.1 enhancement update 2026-10-02T17:29:29.597549+00:00

tomcat: non-persistent DoS attack by feeding data by aborting an upload mod_jk: information leak due to incorrect JkMount/JkUnmount directives processing openssl: X509_to_X509_REQ NULL pointer dereference

 https://cve.radiocsirt.org/vuln/suse-ru-2015:0769-1 SUSE-RU-2015:0769-1 — Security update for openssl1 2026-10-02T17:29:29.597571+00:00

Security update for openssl1

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0288 UBUNTU-CVE-2015-0288 2026-10-02T17:29:29.597608+00:00

Affected: Ubuntu:14.04:LTS: openssl

The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 WID-SEC-W-2026-0180 — Dell Data Protection Advisor: Mehrere Schwachstellen 2026-10-02T17:29:29.597629+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.