https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:32:30.550912+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-785 certfr-2022-avi-785 — De multiples vulnérabilités ont été découvertes dans IBM Cognos Analytics. Certaines d'entre elles permettent à un atta… 2026-10-02T14:32:30.650905+00:00 certfr-2022-avi-785 https://cve.radiocsirt.org/vuln/cnvd-2021-37767 cnvd-2021-37767 2026-10-02T14:32:30.650958+00:00 cnvd-2021-37767 https://cve.radiocsirt.org/vuln/euvd-2026-26113 EUVD-2026-26113 2026-10-02T14:32:30.650981+00:00 EUVD-2026-26113 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28918 fkie_cve-2021-28918 2026-10-02T14:32:30.651005+00:00

Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs and reach critical VPN or LAN hosts.

 https://cve.radiocsirt.org/vuln/ghsa-4c7m-wxvm-r7gc GHSA-4c7m-wxvm-r7gc — Improper parsing of octal bytes in netmask 2026-10-02T14:32:30.651052+00:00

Affected: npm: netmask

Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs and reach critical VPN or LAN hosts.

:exclamation: NOTE: The fix for this issue was incomplete. A subsequent fix was made in version `2.0.1` which was assigned [CVE-2021-29418 / GHSA-pch5-whg9-qr2r](https://github.com/advisories/GHSA-pch5-whg9-qr2r). For complete protection from this vulnerability an upgrade to version 2.0.1 or later is recommended.

 https://cve.radiocsirt.org/vuln/gsd-2021-28918 gsd-2021-28918 2026-10-02T14:32:30.651104+00:00 gsd-2021-28918 https://cve.radiocsirt.org/vuln/rhsa-2021:1499 RHSA-2021:1499 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.3 security and bug fix update 2026-10-02T14:32:30.651123+00:00

nodejs-glob-parent: Regular expression denial of service nodejs-underscore: Arbitrary code execution via the template function nodejs-is-svg: ReDoS via malicious string nodejs-netmask: improper input validation of octal input data nodejs-netmask: incorrectly parses an IP address that has octal integer with invalid character

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1354 WID-SEC-W-2022-1354 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-02T14:32:30.651164+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.