https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:16:37.351006+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-490 certfr-2021-avi-490 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum Protect. Certaines d'entre elles permettent à un atta… 2026-10-04T06:16:37.355348+00:00 certfr-2021-avi-490 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28476 fkie_cve-2020-28476 2026-10-04T06:16:37.355432+00:00

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-23336. Reason: This candidate is a reservation duplicate of CVE-2021-23336. Notes: All CVE users should reference CVE-2021-23336 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

 https://cve.radiocsirt.org/vuln/ghsa-r544-rgrc-h989 GHSA-r544-rgrc-h989 2026-10-04T06:16:37.355495+00:00

All versions of package tornado are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter.

 https://cve.radiocsirt.org/vuln/gsd-2020-28476 gsd-2020-28476 2026-10-04T06:16:37.355542+00:00 gsd-2020-28476 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-28476 UBUNTU-CVE-2020-28476 2026-10-04T06:16:37.355568+00:00

Affected: Ubuntu:Pro:16.04:LTS: python-tornado, Ubuntu:Pro:18.04:LTS: python-tornado, Ubuntu:Pro:20.04:LTS: python-tornado, Ubuntu:20.04:LTS: python-tornado4

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-23336. Reason: This candidate is a reservation duplicate of CVE-2021-23336. Notes: All CVE users should reference CVE-2021-23336 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage