https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:26:53.747925+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-01664 bdu:2016-01664 2026-10-03T09:26:53.913644+00:00 bdu:2016-01664 https://cve.radiocsirt.org/vuln/bell-cve-2015-8472 Withdrawn: BELL-CVE-2015-8472 — CVE-2015-8472 does not affect BellSoft software 2026-10-03T09:26:53.913745+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2016-avi-106 certfr-2016-avi-106 — De multiples vulnérabilités ont été corrigées dans <span class="textit">les produits Apple</span>. Certaines d'entre el… 2026-10-03T09:26:53.913766+00:00 certfr-2016-avi-106 https://cve.radiocsirt.org/vuln/cnvd-2015-08340 cnvd-2015-08340 2026-10-03T09:26:53.913783+00:00 cnvd-2015-08340 https://cve.radiocsirt.org/vuln/euvd-2026-95736 EUVD-2026-95736 2026-10-03T09:26:53.913796+00:00 EUVD-2026-95736 https://cve.radiocsirt.org/vuln/fkie_cve-2015-8472 fkie_cve-2015-8472 2026-10-03T09:26:53.913807+00:00

Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126.

 https://cve.radiocsirt.org/vuln/ghsa-h5hh-r95x-mmfq GHSA-h5hh-r95x-mmfq 2026-10-03T09:26:53.913838+00:00

Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126.

 https://cve.radiocsirt.org/vuln/gsd-2015-8472 gsd-2015-8472 2026-10-03T09:26:53.913856+00:00 gsd-2015-8472 https://cve.radiocsirt.org/vuln/msrc_cve-2015-8472 msrc_CVE-2015-8472 — Buffer overflow in libpng allows remote attackers to cause a denial of service 2026-10-03T09:26:53.913866+00:00 msrc_CVE-2015-8472 https://cve.radiocsirt.org/vuln/oesa-2024-2091 OESA-2024-2091 — syslinux security update 2026-10-03T09:26:53.913884+00:00

Affected: openEuler:24.03-LTS: syslinux, openEuler:22.03-LTS-SP4: syslinux, openEuler:22.03-LTS-SP3: syslinux, openEuler:20.03-LTS-SP4: syslinux, openEuler:22.03-LTS-SP1: syslinux

Security Fix(es):

The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.(CVE-2011-2501)

Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.(CVE-2011-2690)

The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.(CVE-2011-2691)

The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly hav…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10534-1 openSUSE-SU-2024:10534-1 — java-1_7_0-openjdk-1.7.0.121-1.1 on GA media 2026-10-03T09:26:53.913942+00:00

java-1_7_0-openjdk-1.7.0.121-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2015:2594 RHSA-2015:2594 — Red Hat Security Advisory: libpng security update 2026-10-03T09:26:53.914185+00:00

libpng: Out-of-bounds read in png_convert_to_rfc1123 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions

 https://cve.radiocsirt.org/vuln/suse-su-2016:0265-1 SUSE-SU-2016:0265-1 — Security update for java-1_7_0-openjdk 2026-10-03T09:26:53.914206+00:00

Security update for java-1_7_0-openjdk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-8472 UBUNTU-CVE-2015-8472 2026-10-03T09:26:53.914228+00:00

Affected: Ubuntu:14.04:LTS: libpng

Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0915 WID-SEC-W-2026-0915 — Kyocera Drucker: Mehrere Schwachstellen 2026-10-03T09:26:53.914263+00:00

Ein Angreifer aus dem lokalen Netzwerk kann mehrere Schwachstellen in verschiedenen Modellen der Kyocera ECOSYS und TASKalfa Produktfamilien ausnutzen, um Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.