https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:11:58.807660+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-01958 bdu:2020-01958 2026-10-04T10:11:58.922687+00:00 bdu:2020-01958 https://cve.radiocsirt.org/vuln/certfr-2020-avi-237 certfr-2020-avi-237 — De multiples vulnérabilités ont été découvertes dans Zimbra. Elles permettent à un attaquant de provoquer une exécution… 2026-10-04T10:11:58.922730+00:00 certfr-2020-avi-237 https://cve.radiocsirt.org/vuln/cnvd-2020-07221 cnvd-2020-07221 2026-10-04T10:11:58.922749+00:00 cnvd-2020-07221 https://cve.radiocsirt.org/vuln/euvd-2026-35755 EUVD-2026-35755 2026-10-04T10:11:58.922762+00:00 EUVD-2026-35755 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1930 fkie_cve-2020-1930 2026-10-04T10:11:58.922772+00:00

A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration (.cf) files can be configured to run system commands similar to CVE-2018-11805. With this bug unpatched, exploits can be injected in a number of scenarios including the same privileges as spamd is run which may be elevated though doing so remotely is difficult. In addition to upgrading to SA 3.4.4, we again recommend that users should only use update channels or 3rd party .cf files from trusted places. If you cannot upgrade, do not use 3rd party rulesets, do not use sa-compile and do not run spamd as an account with elevated privileges.

 https://cve.radiocsirt.org/vuln/ghsa-pxq8-92ff-q845 GHSA-pxq8-92ff-q845 2026-10-04T10:11:58.922802+00:00

A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration (.cf) files can be configured to run system commands similar to CVE-2018-11805. With this bug unpatched, exploits can be injected in a number of scenarios including the same privileges as spamd is run which may be elevated though doing so remotely is difficult. In addition to upgrading to SA 3.4.4, we again recommend that users should only use update channels or 3rd party .cf files from trusted places. If you cannot upgrade, do not use 3rd party rulesets, do not use sa-compile and do not run spamd as an account with elevated privileges.

 https://cve.radiocsirt.org/vuln/gsd-2020-1930 gsd-2020-1930 2026-10-04T10:11:58.922819+00:00 gsd-2020-1930 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0446-1 openSUSE-SU-2020:0446-1 — Security update for spamassassin 2026-10-04T10:11:58.922829+00:00

Security update for spamassassin

 https://cve.radiocsirt.org/vuln/suse-su-2020:0810-1 SUSE-SU-2020:0810-1 — Security update for spamassassin 2026-10-04T10:11:58.922846+00:00

Security update for spamassassin

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1930 UBUNTU-CVE-2020-1930 2026-10-04T10:11:58.922862+00:00

Affected: Ubuntu:Pro:14.04:LTS: spamassassin, Ubuntu:16.04:LTS: spamassassin, Ubuntu:18.04:LTS: spamassassin

A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration (.cf) files can be configured to run system commands similar to CVE-2018-11805. With this bug unpatched, exploits can be injected in a number of scenarios including the same privileges as spamd is run which may be elevated though doing so remotely is difficult. In addition to upgrading to SA 3.4.4, we again recommend that users should only use update channels or 3rd party .cf files from trusted places. If you cannot upgrade, do not use 3rd party rulesets, do not use sa-compile and do not run spamd as an account with elevated privileges.