https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:22:21.964001+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2019:2799 ALSA-2019:2799 — Important: nginx:1.14 security update 2026-10-03T04:22:22.068803+00:00

Affected: AlmaLinux:8: nginx, AlmaLinux:8: nginx-all-modules, AlmaLinux:8: nginx-filesystem, AlmaLinux:8: nginx-mod-http-image-filter, AlmaLinux:8: nginx-mod-http-perl, AlmaLinux:8: nginx-mod-http-xslt-filter, AlmaLinux:8: nginx-mod-mail, AlmaLinux:8: nginx-mod-stream

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 (Post Office Protocol 3) and IMAP protocols, with a focus on high concurrency, performance and low memory usage.

Security Fix(es):

* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)

* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)

* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2019-02994 bdu:2019-02994 2026-10-03T04:22:22.068905+00:00 bdu:2019-02994 https://cve.radiocsirt.org/vuln/bell-cve-2019-9511 Withdrawn: BELL-CVE-2019-9511 — CVE-2019-9511 does not affect BellSoft software 2026-10-03T04:22:22.068929+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2019-avi-389 certfr-2019-avi-389 — De multiples vulnérabilités ont été découvertes dans Nginx. Elles permettent à un attaquant de provoquer un déni de ser… 2026-10-03T04:22:22.068967+00:00 certfr-2019-avi-389 https://cve.radiocsirt.org/vuln/cleanstart-2024-iw99789 CLEANSTART-2024-IW99789 — Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentia… 2026-10-03T04:22:22.068995+00:00

Affected: CleanStart: nghttp2

Security vulnerability affects the nghttp2 package. Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service.

 https://cve.radiocsirt.org/vuln/euvd-2026-52932 EUVD-2026-52932 2026-10-03T04:22:22.069016+00:00 EUVD-2026-52932 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9511 fkie_cve-2019-9511 2026-10-03T04:22:22.069028+00:00

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.

 https://cve.radiocsirt.org/vuln/ghsa-89fc-749h-w2fj GHSA-89fc-749h-w2fj 2026-10-03T04:22:22.069050+00:00

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.

 https://cve.radiocsirt.org/vuln/gsd-2019-9511 gsd-2019-9511 2026-10-03T04:22:22.069065+00:00 gsd-2019-9511 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2114-1 openSUSE-SU-2019:2114-1 — Security update for nodejs10 2026-10-03T04:22:22.069076+00:00

Security update for nodejs10

 https://cve.radiocsirt.org/vuln/rhsa-2019:2745 RHSA-2019:2745 — Red Hat Security Advisory: rh-nginx110-nginx security update 2026-10-03T04:22:22.069097+00:00

HTTP/2: large amount of data requests leads to denial of service HTTP/2: flood using PRIORITY frames results in excessive resource consumption HTTP/2: 0-length headers lead to denial of service

 https://cve.radiocsirt.org/vuln/suse-su-2019:14246-1 SUSE-SU-2019:14246-1 — Security update for Mozilla Firefox 2026-10-03T04:22:22.069118+00:00

Security update for Mozilla Firefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9511 UBUNTU-CVE-2019-9511 2026-10-03T04:22:22.069200+00:00

Affected: Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:16.04:LTS: nginx, Ubuntu:Pro:16.04:LTS: nghttp2, Ubuntu:Pro:16.04:LTS: nodejs, Ubuntu:18.04:LTS: nginx, Ubuntu:Pro:18.04:LTS: nghttp2, Ubuntu:Pro:18.04:LTS: nodejs

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1050 WID-SEC-W-2024-1050 — nginx: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T04:22:22.069229+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in nginx ausnutzen, um einen Denial of Service Angriff durchzuführen.