https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:23:12.958588+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-03226 bdu:2019-03226 2026-10-03T04:23:12.974786+00:00 bdu:2019-03226 https://cve.radiocsirt.org/vuln/bell-cve-2019-14812 Withdrawn: BELL-CVE-2019-14812 — CVE-2019-14812 does not affect BellSoft software 2026-10-03T04:23:12.974823+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/euvd-2026-56612 EUVD-2026-56612 2026-10-03T04:23:12.974844+00:00 EUVD-2026-56612 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14812 fkie_cve-2019-14812 2026-10-03T04:23:12.974855+00:00

A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.

 https://cve.radiocsirt.org/vuln/ghsa-rmmv-j9x6-f2v4 GHSA-rmmv-j9x6-f2v4 2026-10-03T04:23:12.974882+00:00

A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.

 https://cve.radiocsirt.org/vuln/gsd-2019-14812 gsd-2019-14812 2026-10-03T04:23:12.974897+00:00 gsd-2019-14812 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2222-1 openSUSE-SU-2019:2222-1 — Security update for ghostscript 2026-10-03T04:23:12.974907+00:00

Security update for ghostscript

 https://cve.radiocsirt.org/vuln/rhsa-2019:2534 RHSA-2019:2534 — Red Hat Security Advisory: Red Hat 3scale API Management 2.6.0 release and security update 2026-10-03T04:23:12.974943+00:00

ghostscript: -dSAFER escape via .buildfont1 (701394) ghostscript: Safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator (701445) ghostscript: Safer mode bypass by .forceput exposure in setuserparams (701444) ghostscript: Safer mode bypass by .forceput exposure in setsystemparams (701443) ghostscript: Safer mode bypass by .forceput exposure in .pdfexectoken and other procedures (701450) 3scale: user session cookie does not set HTTPOnly

 https://cve.radiocsirt.org/vuln/suse-su-2019:2460-1 SUSE-SU-2019:2460-1 — Security update for ghostscript 2026-10-03T04:23:12.975023+00:00

Security update for ghostscript

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14812 UBUNTU-CVE-2019-14812 2026-10-03T04:23:12.975052+00:00

Affected: Ubuntu:16.04:LTS: ghostscript, Ubuntu:18.04:LTS: ghostscript

A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.