https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:04:19.332618+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-01959 bdu:2020-01959 2026-10-04T11:04:19.366733+00:00 bdu:2020-01959 https://cve.radiocsirt.org/vuln/certfr-2020-avi-237 certfr-2020-avi-237 — De multiples vulnérabilités ont été découvertes dans Zimbra. Elles permettent à un attaquant de provoquer une exécution… 2026-10-04T11:04:19.366780+00:00 certfr-2020-avi-237 https://cve.radiocsirt.org/vuln/cnvd-2020-03929 cnvd-2020-03929 2026-10-04T11:04:19.366809+00:00 cnvd-2020-03929 https://cve.radiocsirt.org/vuln/euvd-2026-35730 EUVD-2026-35730 2026-10-04T11:04:19.366828+00:00 EUVD-2026-35730 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1931 fkie_cve-2020-1931 2026-10-04T11:04:19.366847+00:00

A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration (.cf) files can be configured to run system commands similar to CVE-2018-11805. This issue is less stealthy and attempts to exploit the issue will throw warnings. Thanks to Damian Lukowski at credativ for reporting the issue ethically. With this bug unpatched, exploits can be injected in a number of scenarios though doing so remotely is difficult. In addition to upgrading to SA 3.4.4, we again recommend that users should only use update channels or 3rd party .cf files from trusted places.

 https://cve.radiocsirt.org/vuln/ghsa-p22p-qh9c-7725 GHSA-p22p-qh9c-7725 2026-10-04T11:04:19.366895+00:00

A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration (.cf) files can be configured to run system commands similar to CVE-2018-11805. This issue is less stealthy and attempts to exploit the issue will throw warnings. Thanks to Damian Lukowski at credativ for reporting the issue ethically. With this bug unpatched, exploits can be injected in a number of scenarios though doing so remotely is difficult. In addition to upgrading to SA 3.4.4, we again recommend that users should only use update channels or 3rd party .cf files from trusted places.

 https://cve.radiocsirt.org/vuln/gsd-2020-1931 gsd-2020-1931 2026-10-04T11:04:19.366929+00:00 gsd-2020-1931 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0446-1 openSUSE-SU-2020:0446-1 — Security update for spamassassin 2026-10-04T11:04:19.366947+00:00

Security update for spamassassin

 https://cve.radiocsirt.org/vuln/suse-su-2020:0810-1 SUSE-SU-2020:0810-1 — Security update for spamassassin 2026-10-04T11:04:19.366975+00:00

Security update for spamassassin

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1931 UBUNTU-CVE-2020-1931 2026-10-04T11:04:19.367000+00:00

Affected: Ubuntu:Pro:14.04:LTS: spamassassin, Ubuntu:16.04:LTS: spamassassin, Ubuntu:18.04:LTS: spamassassin

A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration (.cf) files can be configured to run system commands similar to CVE-2018-11805. This issue is less stealthy and attempts to exploit the issue will throw warnings. Thanks to Damian Lukowski at credativ for reporting the issue ethically. With this bug unpatched, exploits can be injected in a number of scenarios though doing so remotely is difficult. In addition to upgrading to SA 3.4.4, we again recommend that users should only use update channels or 3rd party .cf files from trusted places.