https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:47:23.639958+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01803 bdu:2021-01803 2026-10-03T13:47:23.876254+00:00 bdu:2021-01803 https://cve.radiocsirt.org/vuln/bit-openldap-2020-25692 BIT-openldap-2020-25692 2026-10-03T13:47:23.876303+00:00

Affected: Bitnami: openldap

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-791 certfr-2021-avi-791 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T13:47:23.876336+00:00 certfr-2021-avi-791 https://cve.radiocsirt.org/vuln/euvd-2026-45744 EUVD-2026-45744 2026-10-03T13:47:23.876354+00:00 EUVD-2026-45744 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25692 fkie_cve-2020-25692 2026-10-03T13:47:23.876365+00:00

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

 https://cve.radiocsirt.org/vuln/ghsa-73cr-r2gx-wgq6 GHSA-73cr-r2gx-wgq6 2026-10-03T13:47:23.876386+00:00

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

 https://cve.radiocsirt.org/vuln/gsd-2020-25692 gsd-2020-25692 2026-10-03T13:47:23.876400+00:00 gsd-2020-25692 https://cve.radiocsirt.org/vuln/icsa-22-272-02 ICSA-22-272-02 — Hitachi Energy MicroSCADA Pro X SYS600 2026-10-03T13:47:23.876410+00:00

Hitachi Energy is aware of public reports of vulnerabilities in third-party open-source software components (OpenLDAP and OpenSSL) used in MicroSCADA Pro/X SYS600 products.CVE-2020-25692 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Hitachi Energy is aware of public reports of vulnerabilities in third-party open-source software components (OpenLDAP and OpenSSL) used in MicroSCADA Pro/X SYS600 products.CVE-2022-0778 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

 https://cve.radiocsirt.org/vuln/msrc_cve-2020-25692 msrc_CVE-2020-25692 — A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55 during a request for renaming… 2026-10-03T13:47:23.876431+00:00 msrc_CVE-2020-25692 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1918-1 openSUSE-SU-2020:1918-1 — Security update for openldap2 2026-10-03T13:47:23.876447+00:00

Security update for openldap2

 https://cve.radiocsirt.org/vuln/rhba-2021:2854 RHBA-2021:2854 — Red Hat Bug Fix Advisory: Migration Toolkit for Containers (MTC) 1.4.6 release advisory 2026-10-03T13:47:23.876462+00:00

libwebp: heap-based buffer overflow in PutLE16() nss: TLS 1.3 CCS flood remote DoS Attack openldap: NULL pointer dereference for unauthenticated packet in slapd kernel: security bypass in certs/blacklist.c and certs/system_keyring.c jetty: local temporary directory hijacking vulnerability jetty: buffer not correctly recycled in Gzip Request inflation jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS libwebp: heap-based buffer overflow in WebPDecode*Into functions libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c lz4: memory corruption due to an integer overflow bug caused by memmove argument libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms rpm: Signature checks bypass via corrupted rpm package jenkins-2-plugins/config-file-provider: Does not configure its XML parser to prevent XML external entity (XXE) attacks. jenkins-2-plugins/config-file-provider: Does not correctly perform permission checks in several HTTP endpoints. jenkins-2-plugins/config-file-provider: does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnera…

 https://cve.radiocsirt.org/vuln/suse-su-2020:14541-1 SUSE-SU-2020:14541-1 — Security update for openldap2 2026-10-03T13:47:23.876520+00:00

Security update for openldap2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25692 UBUNTU-CVE-2020-25692 2026-10-03T13:47:23.876536+00:00

Affected: Ubuntu:Pro:14.04:LTS: openldap, Ubuntu:16.04:LTS: openldap, Ubuntu:18.04:LTS: openldap, Ubuntu:20.04:LTS: openldap

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3161 WID-SEC-W-2024-3161 — OpenLDAP: Schwachstelle ermöglicht Denial of Service 2026-10-03T13:47:23.876558+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenLDAP ausnutzen, um einen Denial of Service Angriff durchzuführen.