https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:31:52.805661+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-172029 EUVD-2026-172029 2026-10-02T17:31:52.871298+00:00 EUVD-2026-172029 https://cve.radiocsirt.org/vuln/fkie_cve-2020-4670 fkie_cve-2020-4670 2026-10-02T17:31:52.871345+00:00

IBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data structure store, running on the remote host is not protected by password authentication. A remote attacker can exploit this to gain unauthorized access to the server. IBM X-Force ID: 186401.

 https://cve.radiocsirt.org/vuln/ghsa-868g-rq8g-xcxg GHSA-868g-rq8g-xcxg 2026-10-02T17:31:52.871391+00:00

IBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data structure store, running on the remote host is not protected by password authentication. A remote attacker can exploit this to gain unauthorized access to the server. IBM X-Force ID: 186401.

 https://cve.radiocsirt.org/vuln/gsd-2020-4670 gsd-2020-4670 2026-10-02T17:31:52.871419+00:00 gsd-2020-4670 https://cve.radiocsirt.org/vuln/icsma-21-187-01 ICSMA-21-187-01 — Philips Vue PACS (Update B) 2026-10-02T17:31:52.871439+00:00

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. CVE-2020-1938 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This vulnerability exists within a third party software component (Redis). CVE-2018-12326 and CVE-2018-11218 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct. This vulnerability exists within a third party software component (Redis). CVE-2020-4670 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The software initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure. CVE-2018-8014 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The product uses a cryptographic key or pas…