https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:48:20.096503+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-04709 bdu:2019-04709 2026-10-03T10:48:20.201956+00:00 bdu:2019-04709 https://cve.radiocsirt.org/vuln/certfr-2019-avi-657 certfr-2019-avi-657 — De multiples vulnérabilités ont été découvertes dans Tenable.sc de Tenable. Certaines d'entre elles permettent à un att… 2026-10-03T10:48:20.202002+00:00 certfr-2019-avi-657 https://cve.radiocsirt.org/vuln/cnvd-2019-40714 cnvd-2019-40714 2026-10-03T10:48:20.202022+00:00 cnvd-2019-40714 https://cve.radiocsirt.org/vuln/euvd-2026-49620 EUVD-2026-49620 2026-10-03T10:48:20.202035+00:00 EUVD-2026-49620 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3465 fkie_cve-2019-3465 2026-10-03T10:48:20.202045+00:00

Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message.

 https://cve.radiocsirt.org/vuln/ghsa-pqm6-cgwr-x6pf GHSA-pqm6-cgwr-x6pf — Signature validation bypass in XmlSecLibs 2026-10-03T10:48:20.202073+00:00

Affected: Packagist: robrichards/xmlseclibs

Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message.

 https://cve.radiocsirt.org/vuln/gsd-2019-3465 gsd-2019-3465 2026-10-03T10:48:20.202097+00:00 gsd-2019-3465 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-3465 UBUNTU-CVE-2019-3465 2026-10-03T10:48:20.202109+00:00

Affected: Ubuntu:Pro:16.04:LTS: simplesamlphp, Ubuntu:Pro:18.04:LTS: simplesamlphp

Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message.