https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:46:11.606009+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-01658 bdu:2023-01658 2026-10-03T19:46:11.616343+00:00 bdu:2023-01658 https://cve.radiocsirt.org/vuln/bell-cve-2019-14855 Withdrawn: BELL-CVE-2019-14855 — CVE-2019-14855 does not affect BellSoft software 2026-10-03T19:46:11.616386+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cleanstart-2026-ht23337 Withdrawn: CLEANSTART-2026-HT23337 — flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm 2026-10-03T19:46:11.616414+00:00

Withdrawn by the publisher.

Affected: CleanStart: gnupg

Security vulnerability affects the gnupg package. A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm.

 https://cve.radiocsirt.org/vuln/cnvd-2020-46841 cnvd-2020-46841 2026-10-03T19:46:11.616455+00:00 cnvd-2020-46841 https://cve.radiocsirt.org/vuln/euvd-2026-56680 EUVD-2026-56680 2026-10-03T19:46:11.616477+00:00 EUVD-2026-56680 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14855 fkie_cve-2019-14855 2026-10-03T19:46:11.616496+00:00

A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forged certificate signatures. This issue affects GnuPG versions before 2.2.18.

 https://cve.radiocsirt.org/vuln/ghsa-cpvm-f36g-55vg GHSA-cpvm-f36g-55vg 2026-10-03T19:46:11.616539+00:00

A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forged certificate signatures. This issue affects GnuPG versions before 2.2.18.

 https://cve.radiocsirt.org/vuln/gsd-2019-14855 gsd-2019-14855 2026-10-03T19:46:11.616566+00:00 gsd-2019-14855 https://cve.radiocsirt.org/vuln/icsa-24-284-16 ICSA-24-284-16 — Rockwell Automation DataMosaix Private Cloud 2026-10-03T19:46:11.616586+00:00

DataMosaix Private Cloud utilizes GnuPG which contains a certificate signature vulnerability found in the SHA-1 algorithm. A threat actor could use this weakness to create forged certificate signatures. If exploited, a malicious user could view customer data. DataMosaix Private Cloud utilizes LZ4 which contains a heap-based buffer overflow vulnerability in versions before 1.9.2 (related to LZ4_compress_destSize), that affects applications that call LZ4_compress_fast with a large input. This issue can also lead to data corruption. If exploited, a malicious actor could perform a remote code execution. DataMosaix Private Cloud utilizes shell.c which contains a vulnerability in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. A threat actor with command execution in the shell can use "enable -f" for runtime loading to gain privileges. If exploited, a malicious actor could perform a remote code execution. DataMosaix Private Cloud utilizes SQLite 3.30.1 which contains a vulnerability in sqlite3Select in select.c that allows a crash if a subselect uses both DISTINCT and window functions and has certain ORDER BY usage. If exploited, a malicious actor could perform a denial of service, which would require the use to restart the software to recover it. DataMosaix Private Cloud utilizes libseccomp, which contains a vulnerability in versions 2.4.0 and earlier that does not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT,…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10815-1 openSUSE-SU-2024:10815-1 — dirmngr-2.2.27-2.4 on GA media 2026-10-03T19:46:11.616645+00:00

dirmngr-2.2.27-2.4 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14855 UBUNTU-CVE-2019-14855 2026-10-03T19:46:11.616679+00:00

Affected: Ubuntu:Pro:14.04:LTS: gnupg, Ubuntu:Pro:16.04:LTS: gnupg, Ubuntu:Pro:16.04:LTS: gnupg2, Ubuntu:18.04:LTS: gnupg2, Ubuntu:18.04:LTS: gnupg1, Ubuntu:20.04:LTS: gnupg1, Ubuntu:22.04:LTS: gnupg1, Ubuntu:24.04:LTS: gnupg1, Ubuntu:25.10: gnupg1, Ubuntu:26.04:LTS: gnupg1

A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forged certificate signatures. This issue affects GnuPG versions before 2.2.18.