https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:48:41.940050+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-45685 EUVD-2026-45685 2026-10-03T06:48:42.099269+00:00 EUVD-2026-45685 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25657 fkie_cve-2020-25657 2026-10-03T06:48:42.099305+00:00

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.

 https://cve.radiocsirt.org/vuln/ghsa-2j9v-8g47-mxh2 GHSA-2j9v-8g47-mxh2 2026-10-03T06:48:42.099336+00:00

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.

 https://cve.radiocsirt.org/vuln/gsd-2020-25657 gsd-2020-25657 2026-10-03T06:48:42.099353+00:00 gsd-2020-25657 https://cve.radiocsirt.org/vuln/msrc_cve-2020-25657 msrc_CVE-2020-25657 — A flaw was found in all released versions of m2crypto where they are vulnerable to Bleichenbacher timing attacks in the… 2026-10-03T06:48:42.099364+00:00 msrc_CVE-2020-25657 https://cve.radiocsirt.org/vuln/oesa-2022-1852 OESA-2022-1852 — m2crypto security update 2026-10-03T06:48:42.099382+00:00

Affected: openEuler:20.03-LTS-SP1: m2crypto, openEuler:20.03-LTS-SP3: m2crypto, openEuler:22.03-LTS: m2crypto

M2Crypto is a crypto and SSL toolkit for Python. It allows you to call OpenSSL functions from Python2 scripts. Security Fix(es): A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.(CVE-2020-25657)

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:2562-1 openSUSE-SU-2022:2562-1 — Security update for python-M2Crypto 2026-10-03T06:48:42.099409+00:00

Security update for python-M2Crypto

 https://cve.radiocsirt.org/vuln/rhsa-2021:1169 RHSA-2021:1169 — Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4.z [ovirt-4.4.5] security, bug fix, enhancement 2026-10-03T06:48:42.099425+00:00

nodejs-bootstrap-select: not escaping title values on <option> may lead to XSS m2crypto: bleichenbacher timing attacks in the RSA decryption API datatables.net: prototype pollution if 'constructor' were used in a data property name nodejs-immer: prototype pollution may lead to DoS or remote code execution

 https://cve.radiocsirt.org/vuln/suse-ru-2025:0796-1 SUSE-RU-2025:0796-1 — Recommended update for python3-M2Crypto 2026-10-03T06:48:42.099446+00:00

Recommended update for python3-M2Crypto

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25657 UBUNTU-CVE-2020-25657 2026-10-03T06:48:42.099461+00:00

Affected: Ubuntu:14.04:LTS: m2crypto, Ubuntu:16.04:LTS: m2crypto, Ubuntu:18.04:LTS: m2crypto, Ubuntu:20.04:LTS: m2crypto, Ubuntu:22.04:LTS: m2crypto, Ubuntu:24.04:LTS: m2crypto, Ubuntu:25.10: m2crypto, Ubuntu:26.04:LTS: m2crypto

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0808 WID-SEC-W-2022-0808 — Red Hat Virtualization Engine: Mehrere Schwachstellen 2026-10-03T06:48:42.099487+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in der Red Hat Virtualization Engine ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, einen Denial of Service Zustand auszulösen und kryptographische Maßnahmen zu umgehen.