https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:57:13.751558+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-02760 bdu:2021-02760 2026-10-02T16:57:13.765006+00:00 bdu:2021-02760 https://cve.radiocsirt.org/vuln/certfr-2021-ale-008 certfr-2021-ale-008 — Le 5 mai 2021, Qualys a publié un bulletin de sécurité contenant 21 vulnérabilités affectant le serveur mail Exim. Quat… 2026-10-02T16:57:13.765060+00:00 certfr-2021-ale-008 https://cve.radiocsirt.org/vuln/certfr-2021-avi-342 certfr-2021-avi-342 — De multiples vulnérabilités ont été découvertes dans Exim. Certaines d'entre elles permettent à un attaquant de provoqu… 2026-10-02T16:57:13.765125+00:00 certfr-2021-avi-342 https://cve.radiocsirt.org/vuln/cleanstart-2025-co93148 CLEANSTART-2025-CO93148 — Exim 4 before 4 2026-10-02T16:57:13.765168+00:00

Affected: CleanStart: exim

Security vulnerability affects the exim package. Exim 4 before 4.

 https://cve.radiocsirt.org/vuln/cnvd-2021-34513 cnvd-2021-34513 2026-10-02T16:57:13.765212+00:00 cnvd-2021-34513 https://cve.radiocsirt.org/vuln/euvd-2026-46866 EUVD-2026-46866 2026-10-02T16:57:13.765237+00:00 EUVD-2026-46866 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28008 fkie_cve-2020-28008 2026-10-02T16:57:13.765257+00:00

Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the spool directory (owned by a non-root user), an attacker can write to a /var/spool/exim4/input spool header file, in which a crafted recipient address can indirectly lead to command execution.

 https://cve.radiocsirt.org/vuln/ghsa-24mx-4mj6-v64q GHSA-24mx-4mj6-v64q 2026-10-02T16:57:13.765335+00:00

Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the spool directory (owned by a non-root user), an attacker can write to a /var/spool/exim4/input spool header file, in which a crafted recipient address can indirectly lead to command execution.

 https://cve.radiocsirt.org/vuln/gsd-2020-28008 gsd-2020-28008 2026-10-02T16:57:13.765359+00:00 gsd-2020-28008 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0677-1 openSUSE-SU-2021:0677-1 — Security update for exim 2026-10-02T16:57:13.765376+00:00

Security update for exim

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-28008 UBUNTU-CVE-2020-28008 2026-10-02T16:57:13.765420+00:00

Affected: Ubuntu:Pro:14.04:LTS: exim4, Ubuntu:Pro:16.04:LTS: exim4, Ubuntu:18.04:LTS: exim4, Ubuntu:20.04:LTS: exim4

Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the spool directory (owned by a non-root user), an attacker can write to a /var/spool/exim4/input spool header file, in which a crafted recipient address can indirectly lead to command execution.