https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:52:53.394047+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01328 bdu:2021-01328 2026-10-04T19:52:53.411081+00:00 bdu:2021-01328 https://cve.radiocsirt.org/vuln/cleanstart-2024-ch43456 CLEANSTART-2024-CH43456 — In GNOME glib-networking through 2 2026-10-04T19:52:53.411119+00:00

Affected: CleanStart: glib-networking

Security vulnerability affects the glib-networking package. In GNOME glib-networking through 2.

 https://cve.radiocsirt.org/vuln/cnvd-2020-31099 cnvd-2020-31099 2026-10-04T19:52:53.411151+00:00 cnvd-2020-31099 https://cve.radiocsirt.org/vuln/euvd-2026-41887 EUVD-2026-41887 2026-10-04T19:52:53.411165+00:00 EUVD-2026-41887 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13645 fkie_cve-2020-13645 2026-10-04T19:52:53.411176+00:00

In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.

 https://cve.radiocsirt.org/vuln/ghsa-p43h-5x4h-9pp7 GHSA-p43h-5x4h-9pp7 2026-10-04T19:52:53.411200+00:00

In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.

 https://cve.radiocsirt.org/vuln/gsd-2020-13645 gsd-2020-13645 2026-10-04T19:52:53.411243+00:00 gsd-2020-13645 https://cve.radiocsirt.org/vuln/msrc_cve-2020-13645 msrc_CVE-2020-13645 — In GNOME glib-networking through 2.64.2 the implementation of GTlsClientConnection skips hostname verification of the s… 2026-10-04T19:52:53.411255+00:00 msrc_CVE-2020-13645 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1094-1 openSUSE-SU-2021:1094-1 — Security update for balsa 2026-10-04T19:52:53.411274+00:00

Security update for balsa

 https://cve.radiocsirt.org/vuln/suse-su-2021:3944-1 SUSE-SU-2021:3944-1 — Security update for glib-networking 2026-10-04T19:52:53.411290+00:00

Security update for glib-networking

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13645 UBUNTU-CVE-2020-13645 2026-10-04T19:52:53.411304+00:00

Affected: Ubuntu:16.04:LTS: glib-networking, Ubuntu:18.04:LTS: glib-networking, Ubuntu:20.04:LTS: balsa, Ubuntu:20.04:LTS: glib-networking

In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0778 WID-SEC-W-2026-0778 — Dell Secure Connect Gateway Policy Manager: Mehrere Schwachstellen 2026-10-04T19:52:53.411330+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Secure Connect Gateway Policy Manager ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.