https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:22:26.576113+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-21570 EUVD-2026-21570 2026-10-05T17:22:26.584936+00:00 EUVD-2026-21570 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20179 fkie_cve-2021-20179 2026-10-05T17:22:26.584968+00:00

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/ghsa-q87w-gh3f-77p7 GHSA-q87w-gh3f-77p7 2026-10-05T17:22:26.584998+00:00

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/gsd-2021-20179 gsd-2021-20179 2026-10-05T17:22:26.585015+00:00 gsd-2021-20179 https://cve.radiocsirt.org/vuln/rhsa-2021:0819 RHSA-2021:0819 — Red Hat Security Advisory: pki-core security update 2026-10-05T17:22:26.585026+00:00

pki-core: Reflected XSS in 'path length' constraint field in CA's Agent page pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab pki-core: Reflected XSS in getcookies?url= endpoint in CA pki-core: KRA vulnerable to reflected XSS via the getPk12 page pki-core: XSS in the certificate search results pki-core: Unprivileged users can renew any certificate

 https://cve.radiocsirt.org/vuln/rhsa-2021:0851 RHSA-2021:0851 — Red Hat Security Advisory: pki-core security and bug fix update 2026-10-05T17:22:26.585051+00:00

pki-core: Reflected XSS in 'path length' constraint field in CA's Agent page pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab pki-core: Reflected XSS in getcookies?url= endpoint in CA pki-core: KRA vulnerable to reflected XSS via the getPk12 page jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods pki-core: XSS in the certificate search results pki-core: Unprivileged users can renew any certificate

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20179 UBUNTU-CVE-2021-20179 2026-10-05T17:22:26.585073+00:00

Affected: Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3648 WID-SEC-W-2024-3648 — Red Hat Enterprise Linux pki-core: Mehrere Schwachstellen 2026-10-05T17:22:26.585105+00:00

Ein entfernter, anonymer oder authentifizierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Sicherheitsmaßnahmen zu umgehen.