https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:22:45.600903+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07109 bdu:2023-07109 2026-10-02T23:22:45.727281+00:00 bdu:2023-07109 https://cve.radiocsirt.org/vuln/certfr-2017-avi-012 certfr-2017-avi-012 — De multiples vulnérabilités ont été corrigées dans <span class="textit">les produits Juniper</span>. Certaines d'entre… 2026-10-02T23:22:45.727318+00:00 certfr-2017-avi-012 https://cve.radiocsirt.org/vuln/cnvd-2015-05760 cnvd-2015-05760 2026-10-02T23:22:45.727336+00:00 cnvd-2015-05760 https://cve.radiocsirt.org/vuln/euvd-2026-322146 EUVD-2026-322146 2026-10-02T23:22:45.727349+00:00 EUVD-2026-322146 https://cve.radiocsirt.org/vuln/fkie_cve-2015-6564 fkie_cve-2015-6564 2026-10-02T23:22:45.727359+00:00

Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.

 https://cve.radiocsirt.org/vuln/ghsa-cm6p-9f8w-c878 GHSA-cm6p-9f8w-c878 2026-10-02T23:22:45.727386+00:00

Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.

 https://cve.radiocsirt.org/vuln/gsd-2015-6564 gsd-2015-6564 2026-10-02T23:22:45.727402+00:00 gsd-2015-6564 https://cve.radiocsirt.org/vuln/icsa-22-349-21 ICSA-22-349-21 — Siemens SCALANCE X-200RNA Switch Devices 2026-10-02T23:22:45.727411+00:00

OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack. sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190. The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data. The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server. The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allows remote…

 https://cve.radiocsirt.org/vuln/rhsa-2015:2088 RHSA-2015:2088 — Red Hat Security Advisory: openssh security, bug fix, and enhancement update 2026-10-02T23:22:45.727590+00:00

openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices openssh: Privilege separation weakness related to PAM support openssh: Use-after-free bug related to PAM support

 https://cve.radiocsirt.org/vuln/rhsa-2016:0741 RHSA-2016:0741 — Red Hat Security Advisory: openssh security, bug fix, and enhancement update 2026-10-02T23:22:45.727612+00:00

openssh: XSECURITY restrictions bypass under certain conditions in ssh(1) openssh: Privilege separation weakness related to PAM support openssh: Use-after-free bug related to PAM support openssh: possible fallback from untrusted to trusted X11 forwarding

 https://cve.radiocsirt.org/vuln/suse-su-2015:1544-1 SUSE-SU-2015:1544-1 — Security update for openssh 2026-10-02T23:22:45.727632+00:00

Security update for openssh

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-6564 UBUNTU-CVE-2015-6564 2026-10-02T23:22:45.727647+00:00

Affected: Ubuntu:14.04:LTS: openssh

Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.